AWS Shield

aws DDoS protection planaws-shield

DDoS protection for AWS resources: always-on network-layer defence in Standard, application-layer mitigation and response in Advanced.

Provider: aws
Kind: DDoS protection plan
Category: Security
Official docs: https://docs.aws.amazon.com/waf/latest/developerguide/shield-chapter.html

Properties · 4 set by this component

property	type	values	required	kind default	this component
adaptiveThresholds	boolean	—	no	—	inherited
alwaysOn	boolean	—	no	—	▸ true
automaticApplicationLayerMitigation · component property	boolean	—	no	false	inherited
automaticMitigationAction · component property	enum	count \| block	no	—	inherited
healthBasedDetection · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
proactiveEngagement · component property	boolean	—	no	false	inherited
protectedResourceCount	integer	—	no	—	inherited
scope	enum	network \| application \| both	no	—	▸ network
telemetry	boolean	—	no	—	▸ false
tier · component property	enum	standard \| advanced	no	standard	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "shield", component: "aws-shield" }

Other DDoS protection plan products · 10

Anti-DDoS Originalibaba-anti-ddos-originalibabacloudddos-protection Anti-DDoS Proalibaba-anti-ddos-proalibabacloudddos-protection Game Shieldalibaba-game-shieldalibabacloudddos-protection Azure DDoS Protectionazure-ddos-protectionazureddos-protection Cloudflare DDoS Protectioncloudflare-ddos-protectioncloudflareddos-protection Cloudflare Magic Transitcloudflare-magic-transitcloudflareddos-protection Generic DDoS protection planddos-protectionddos-protection NETSCOUT Arbor DDoSnetscout-arborddos-protection Radware DefenseProradware-defenseproddos-protection DigitalOcean DDoS Protectiondigitalocean-ddos-protectiondigitaloceanddos-protection

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS Shield: DDoS protection for AWS resources. Shield Standard applies automatically at no extra
3# cost against common volumetric layer 3 and 4 attack vectors such as UDP reflection and TCP SYN
4# floods ("AWS Shield"). Shield Advanced is a paid subscription that adds layer 7 protection through
5# AWS WAF, health-based detection, protection groups, real-time event metrics, Shield Response Team
6# access and cost protection; automatic application layer mitigation is configured, not on by
7# default, and adds a 150-WCU rule group ("AWS Shield Advanced capabilities and options").
8schemaVersion: "1"
9type: "component"
10id: "aws-shield"
11kind: "ddos-protection"
12provider: "aws"
13docs: "https://docs.aws.amazon.com/waf/latest/developerguide/shield-chapter.html"
14defaults:
15  managed: true
16  scope: "network"
17  alwaysOn: true
18  telemetry: false
19properties:
20  tier:
21    type: "enum"
22    values: ["standard", "advanced"]
23    default: "standard"
24  automaticApplicationLayerMitigation:
25    type: "boolean"
26    default: false
27  automaticMitigationAction:
28    type: "enum"
29    values: ["count", "block"]
30  healthBasedDetection:
31    type: "boolean"
32    default: false
33  proactiveEngagement:
34    type: "boolean"
35    default: false

The same page as markdown, for an agent: /catalogue/components/aws-shield.md