A large public service has a high risk of DDoS attacks.
The team wants visibility into events and assistance beyond the standard protection level.
Which service should be evaluated?
AWS Shield Advanced provides expanded DDoS protection, event visibility, and additional mitigation capabilities for qualifying resources.
Detailed explanation
Shield Advanced adds capabilities beyond standard protection, including enhanced visibility and application-layer mitigation support.
Shield Advanced adds capabilities beyond standard protection, including enhanced visibility and application-layer mitigation support.
Trusted Advisor reports recommendations and does not directly mitigate an attack.
Trusted Advisor reports recommendations and does not directly mitigate an attack.
Password policy controls IAM credentials and does not protect a network or application from DDoS traffic.
Password policy controls IAM credentials and does not protect a network or application from DDoS traffic.
Artifact provides compliance documents and does not mitigate DDoS traffic.
Artifact provides compliance documents and does not mitigate DDoS traffic.
Check official documentation
Compare the following points with the official documentation.
AWS WAF Developer GuideのAWS Shield Advanced overviewを確認する。利用料金が発生するため、料金ページも確認する。
What to confirm
Shield Advancedの対象リソース、追加保護機能、料金を要件に照らして評価できる。
Key points
- AWS Shield Advanced
- DDoS
- Application layer
Notes
- Environment: AWS公式Shieldドキュメントの確認
- Confirm current security service capabilities and support-plan conditions in the official AWS documentation.
Foundation review
Protection level
Shield Advanced should be evaluated against the resource risk, visibility needs, and cost.
Service boundary
A credential policy or compliance portal does not mitigate network attacks.