Skip to content

AWS Shield

  • Detection and mitigation against large and sophisticated DDoS attack (many requests at the same time)
  • near real-time visibility into attacks
  • integration with AWS WAF

AWS Shield : standard

  • free
  • activated by-default.
  • protects from layer3/layer4 attacks : SYN/UDP Floods? , Reflection attacks? 👈

AWS Shield : Advance

  • for high-risk workloads.
  • pricing : $3000 / organization
  • enabled consolidated billing for your aws org. 🎯
  • 24/7 access to DDoS response team (DRT)
  • mitigate from layer7 attacks 👈
  • Automatically creates/deploys AWS WAF rules
  • protects these services:
  • ELB
  • Amazon CloudFront distributions
  • API gateway
  • more:
    • AWS Global Accelerator
    • Route 53
    • EC2

Question:

### 1 

A financial services company recently launched an initiative to improve the security of its AWS resources.
And it had enabled AWS Shield Advanced across multiple AWS accounts owned by the company.
Upon analysis, the company has found that the costs incurred are much higher than expected.

Which of the following would you attribute as the underlying reason for the unexpectedly 
high costs for AWS Shield Advanced service?

answer:
Consolidated billing has not been enabled. 
All the AWS accounts should fall under a single consolidated billing for the monthly fee to be charged only once