AWS WAF, AWS Firewall Manager, and AWS Shield Advanced
Developer Guide (API Version 2015-08-24)

Step 1: Activate AWS Shield Advanced

AWS Shield Advanced provides advanced DDoS detection and mitigation protection for network layer (layer 3), transport layer (layer 4), and application layer (layer 7) attacks.

Important

You must activate Shield Advanced for each AWS account that you want to protect. To activate Shield Advanced for multiple accounts, see Activating and Setting Up AWS Shield Advanced for Multiple Accounts.

To activate AWS Shield Advanced

  1. Sign in to the AWS Management Console and open the AWS WAF console at https://console.aws.amazon.com/waf/.

  2. If this is your first time signing in to the AWS WAF console, choose Go to Shield and then Activate AWS Shield Advanced. Otherwise, in the navigation pane, under AWS Shield, choose Protected resources.

  3. Read each term of the agreement, and then select each check box to indicate that you accept the terms. Before you can continue, you must select all check boxes.

  4. Choose Activate service.

    Important

    By choosing Activate service, you are subscribing to Shield Advanced and activating the service. To unsubscribe, contact AWS Support.

You can now go to Step 2: Specify Your Resources to Protect.

Activating and Setting Up AWS Shield Advanced for Multiple Accounts

You must activate Shield Advanced for each AWS account that you want to protect. To do so, follow the procedure in Step 1: Activate AWS Shield Advanced for each account, each time logging in with a different account.

If you activate Shield Advanced for multiple accounts that are in the same consolidated billing account family, the monthly subscription fee covers all those accounts. You don't pay extra subscription fees for individual accounts. You must own all the AWS accounts and resources in the account.

Note

However, AWS Channel Resellers pay a separate monthly fee for each member account. AWS Channel Resellers who resell AWS Shield Advanced to customers with more than one member account can contact us for additional billing support. With respect to such AWS Channel Resellers, AWS reserves the right to modify the monthly fee for AWS Shield Advanced. For more information, see the AWS Shield Advanced Pricing page.

The first time that you activate Shield Advanced from an account, you are presented with a pricing agreement. The pricing agreement is displayed in the console each time that you activate Shield Advanced from a different account. The pricing agreement covers all activated accounts in a consolidated billing family, but you must agree to the terms each time that you activate an account.

You can now go to Step 2: Specify Your Resources to Protect.