AWS Shield Standard is a managed Distributed Denial of Service (DDoS) protection service that is automatically included with AWS services such as Amazon CloudFront and Elastic Load Balancing (ELB). It provides protection against common, most frequently occurring network and transport layer DDoS attacks.
Here's how AWS Shield Standard works to mitigate such attacks:
Automatic Protection: AWS Shield Standard provides always-on detection and automatic inline mitigations that minimize application downtime and latency.
Layer 7 Protection: It offers protection against layer 7 DDoS attacks, which target the application layer and are typically more complex than infrastructure attacks.
Integration with AWS Services: Shield Standard is integrated with other AWS services like ELB and CloudFront, providing a seamless defense mechanism.
Real-Time Visibility: Customers get real-time visibility into attacks via AWS Management Console and CloudWatch.
Cost-Effectiveness: There is no additional charge for AWS Shield Standard; it comes included with AWS services, making it a cost-effective solution for DDoS protection.
Reference:
AWS Shield's official page detailing how it provides managed DDoS protection1.
AWS documentation on best practices for DDoS resiliency, mentioning AWS Shield's role in mitigation2.