Securing DDoS protection services
Each cloud provider has its own implementation of a managed DDoS protection service.
Because cloud providers have very large bandwidth, they can offer (as a paid service) mechanisms to protect customers' environments from DDoS attacks.
The following services help to mitigate DDoS attacks:
- DDoS protection services (discussed in this section)
- Auto-scaling groups combined with load-balancing services
- CDN services (discussed earlier in this chapter)
- WAF services (discussed later in this chapter)
In this section, we will focus on DDoS protection services.
Securing AWS Shield
AWS Shield is the Amazon managed DDoS protection service.
It comes in two price models: