Getting started with AWS Shield Advanced

This tutorial walks you through getting started with AWS Shield Advanced. Shield Advanced provides advanced DDoS detection and mitigation protection for network layer (layer 3), transport layer (layer 4), and application layer (layer 7) attacks.

For more information about Shield Advanced, see AWS Shield Advanced overview.

Note

It's important that you fully configure Shield Advanced prior to a Distributed Denial of Service (DDoS) event. Complete the following steps to help ensure that your application is protected and that you are ready to respond if your application is affected by a DDoS attack.

Perform the following steps in sequence.

Contents

• Subscribe to AWS Shield Advanced
• Add resources to protect and configure protections
  • Configure application layer (layer 7) DDoS protections with AWS WAF
  • Configure health-based detection for your protections
  • Configure alarms and notifications
  • Review and finish your protection configuration
• Configure AWS SRT support
• Create a DDoS dashboard in CloudWatch and set CloudWatch alarms