Resource protections in AWS Shield Advanced

You can add and configure AWS Shield Advanced protections for your resources. You can manage protections for a single resource and you can group your protected resources into logical collections for better event management. You can also track changes to your Shield Advanced protections using AWS Config.

Note

Shield Advanced protects only resources that you have specified either in Shield Advanced or through an AWS Firewall Manager Shield Advanced policy. It doesn't automatically protect your resources.

If you're using an AWS Firewall Manager Shield Advanced policy, you don't need to manage protections for resources that are in scope of the policy. Firewall Manager automatically manages protections for accounts and resources that are in scope of a policy, according to the policy configuration. For more information, see Using AWS Shield Advanced policies in Firewall Manager.

Topics

• List of resources that AWS Shield Advanced protects
• Protecting Amazon EC2 instances and Network Load Balancers with Shield Advanced
• Protecting the application layer (layer 7) with AWS Shield Advanced and AWS WAF
• Health-based detection using health checks with Shield Advanced and Route 53
• Adding AWS Shield Advanced protection to AWS resources
• Editing AWS Shield Advanced protections
• Creating alarms and notifications for resources protected by Shield Advanced
• Removing AWS Shield Advanced protection from an AWS resource
• Grouping your AWS Shield Advanced protections
• Tracking Shield Advanced resource protection changes in AWS Config