CloudFront is, by itself, already inherently resilient to DDoS attacks, since it is integrated with AWS Shield Standard. There is no cost for this protection, and, due to the fact that DDoS mitigation is already in place out of the box, using CloudFront can be a big benefit for our applications. CloudFront itself can protect our applications and act as an extra layer of defense from attacks on the infrastructure and the availability of our web content. AWS Shield Standard automatically protects CloudFront from any layer 3 and layer 4 network DDoS attacks and can provide filtering of most DDoS traffic from the internet.
However, modern attack vectors know how to use even higher-layer DDoS attacks. When we need even higher security, we can use AWS Shield Advanced, which can provide our application with higher-level attack mitigation and near real-time visibility...