Skip to content
SPECIFICTION
Get listed

AWS Shield

aws.amazon.com

From $3,000/mo Free plan WebAPI
Visit aws.amazon.com
Spec score 8.3 #3 of 37 in DDoS Protection Software

What it is

AWS Shield helps AWS customers identify network security configuration issues and defend applications against web exploitation and distributed denial of service events. Shield Standard is automatically configured for AWS customers and provides common network- and transport-layer DDoS protection at no charge. Shield Advanced adds detection and automatic inline mitigation for sophisticated events across network, transport, and application layers. It monitors traffic patterns for anomalies such as HTTP and DNS query floods and supports EC2, Elastic Load Balancing, CloudFront, Global Accelerator, and Route 53. Advanced integrates with AWS WAF and AWS Firewall Manager, with event visibility through Amazon CloudWatch. It includes DDoS cost protection for qualifying usage spikes and up to 50 billion AWS WAF requests per subscribed payer account per calendar month for protected resources. The Advanced plan costs $3,000/mo, requires a one-year subscription commitment, and usage fees may apply. Network security director is in preview and is not included with either listed plan.

Spec sheet

Purpose
AWS Shield identifies network security configuration issues and defends applications against active web exploitation and distributed denial of service events.Read 29 Sep 2026 · aws.amazon.com
Intended users
Shield is for AWS customers protecting websites and applications, with Shield Advanced covering internet-facing applications on eligible AWS resources.Read 29 Sep 2026 · aws.amazon.com
Integrations
Shield Advanced integrates with AWS WAF and AWS Firewall Manager, and provides event visibility through Amazon CloudWatch.Read 29 Sep 2026 · aws.amazon.com
Automatic mitigation
Shield Advanced detects and blocks sophisticated DDoS events across network, transport, and application layers with automatic inline mitigation.Read 29 Sep 2026 · aws.amazon.com
AWS launch
Amazon Web Services says it launched in 2006.Read 29 Sep 2026 · aws.amazon.com
Cost protection
Shield Advanced includes DDoS cost protection for qualifying usage spikes on protected EC2, ELB, CloudFront, Global Accelerator, and Route 53 resources.Read 29 Sep 2026 · aws.amazon.com
Incident support
Shield Advanced provides 24/7 access to the Shield Response Team for Business or Enterprise support customers.Read 29 Sep 2026 · aws.amazon.com
Network security analysis
Network security director, which is in preview, analyzes AWS resources, visualizes network topology, identifies configuration issues, and offers remediation recommendations.Read 29 Sep 2026 · aws.amazon.com
Protected services
Shield Advanced supports protected resources including EC2, Elastic Load Balancing, CloudFront, Global Accelerator, and Route 53.Read 29 Sep 2026 · aws.amazon.com
Subscription commitment
Shield Advanced requires a one-year subscription commitment and renews annually.Read 29 Sep 2026 · aws.amazon.com
Support limitation
Custom mitigations from the Shield Response Team during events require Business or Enterprise support.Read 29 Sep 2026 · aws.amazon.com
Traffic monitoring
Shield Advanced baselines application traffic patterns to detect anomalies such as HTTP floods and DNS query floods.Read 29 Sep 2026 · aws.amazon.com
WAF allowance
The Shield Advanced subscription includes up to 50 billion AWS WAF requests per subscribed payer account in a calendar month for protected resources.Read 29 Sep 2026 · aws.amazon.com

Plans and prices

AWS Shield Standard Free Common network and transport layer DDoS protection · Automatically configured for AWS customers · Does not include network security director Read 29 Sep 2026 · aws.amazon.com
AWS Shield Advanced $3,000 a month Monthly fee; requires a 1-year subscription commitment; usage fees may apply Advanced DDoS protection · Up to 50 billion AWS WAF requests per subscribed payer account per calendar month · Network security director not included Read 29 Sep 2026 · aws.amazon.com

Every AWS Shield plan and price →

Strong points and limits

Strong points

  • Standard protection is automatically configured for AWS customers.
  • Advanced provides automatic inline mitigation.
  • Monitors for HTTP and DNS query floods.
  • Advanced includes up to 50 billion AWS WAF requests monthly.
  • Includes cost protection for qualifying usage spikes.

Limits

  • Advanced costs $3,000/mo.
  • Advanced requires a one-year subscription commitment.
  • Usage fees may apply.
  • Custom event mitigations require Business or Enterprise support.

Who it suits

Shield suits AWS customers protecting websites and applications. Shield Advanced is aimed at internet-facing applications on eligible AWS resources, while 24/7 Shield Response Team access is for Business or Enterprise support customers.

Verdict

Shield Standard provides baseline network and transport-layer DDoS protection without charge. Advanced adds broader mitigation and monitoring, but it carries a one-year commitment and a $3,000/mo fee.

Where Specifiction places it

Alternatives to AWS ShieldAll alternatives →