Introduction to AWS Shield
AWS Shield provides managed DDoS protection for applications on AWS.
Shield is a managed Distributed Denial of Service (DDoS) protection service. It provides always-on detection and protection against common and frequently occurring attacks.
A Denial of Service (DoS) attack aims to damage the availability of a site by flooding it with requests that consume all available resources. A Distributed Denial of Service (DDoS) is a DoS attack originating from multiple sources, often using compromised or controlled systems, which makes manual intervention difficult.
Technical Specs: DDOS Attack Classification:
• Infrastructure Layer Attacks
• Application Layer Attacks
General techniques for protecting applications against DDoS attacks include reducing the attack surface area, planning for scale, understanding normal vs. abnormal traffic patterns, and deploying Web Application Firewalls (WAF) for sophisticated application attacks.
Technical Specs: • Reduce Attack Surface Area
• Plan for Scale
• Know what is normal and abnormal traffic
• Deploy WAF for Sophisticated Application attacks