AWS Shield is a managed DDoS protection service. There are two tiers:

  • Standard is provided free of charge to all customers, and protects the AWS platform as a whole. IT covers layer 3 and layer 4 attacks.
  • Advanced provides additional defence and near real-time visibility of attacks. It also allows you to engage the DRT during periods where the application appears to be unhealthy due to a DDoS.