AWS-Shield

• AWS Shield is a security service that protects web applications hosted on the AWS public cloud against distributed denial of service (DDoS) attacks.

• A DDoS attack targets a particular computing resource, such as a server, and floods it with incoming traffic or connection requests, which negatively affects its performance. 

• According to Amazon, AWS Shield detects and protects against the three types of DDoS attacks: 

• Infrastructure-layer attacks - including User Datagram Protocol (UDP) floods; 

• State-exhaustion attacks - including SYN floods; 

• Application-layer attacks - including HTTP floods.