AWS Cloud TutorialLesson 62Free preview

AWS Network Protection

This lesson is part of AWS · All levels

Summary

Denial of Service (DoS) attacks attempt to flood resources with fake traffic so that services cannot be accessed; distributed denial of service (DDoS) versions use multiple resources at once from botnets. AWS provides AWS Shield for automated DDoS protection and AWS WAF as an application-level firewall. The layered protection on the edge helps maintain the availability of applications.

Key points

DoS comes from one source, DDoS from multiple sources (botnets)
Examples of attacks: SYN flood, UDP flood, amplification attack
AWS Shield Standard is automatically activated at no additional cost
AWS WAF filters HTTP/HTTPS traffic based on the rules
CloudFront and Route 53 at the edge help absorb attack traffic

Full lesson

Code examples and quizzes

Full lessons, code examples, and quizzes are available to subscribers. 5 questions.