AWS Shield

A Distributed Denial of Service (DDoS) attack decreases the availability of an application or service by disrupting its normal traffic flow by flooding it with traffic from multiple compromised systems. Due to this, legitimate users of the service cannot access it. Applications that are publicly accessible are particularly vulnerable to DDoS attacks.

AWS Shield

AWS Shield protects applications hosted in the AWS cloud from DDoS attacks. AWS Shield protects our application's perimeter, which is our first entry point. For example, the first entry point for region-specific applications is the VPC, where the application is hosted. AWS provides us with AWS Shield (standard) and AWS Shield Advanced.

AWS Shield or AWS Shield standard is automatically enabled for all AWS users without additional charges and protects our services and applications from commonly occurring network and transport layer attacks.