124k views
0 votes
What is one method of protecting against distributed denial of service (DDoS) attacks in the AWS Cloud?

1) Using AWS Shield
2) Implementing a web application firewall (WAF)
3) Configuring network access control lists (ACLs)
4) Enabling AWS CloudTrail logging

1 Answer

4 votes

Final answer:

AWS Shield is the method used for protecting against DDoS attacks in the AWS Cloud, providing always-on detection and automatic mitigations to minimize application downtime and latency.

Step-by-step explanation:

The method for protecting against distributed denial of service (DDoS) attacks in the AWS Cloud is using AWS Shield. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there's no need to engage AWS Support to benefit from DDoS protection.

Other methods mentioned, such as implementing a web application firewall (WAF), configuring network access control lists (ACLs), and enabling AWS CloudTrail logging, also contribute to a robust security posture. WAF helps protect your web applications from common web exploits, ACLs manage incoming and outgoing traffic at the subnet level, and CloudTrail provides a history of AWS API calls for your account, which can be useful for post-incident analysis.

User Sam Vanhoutte
by
7.4k points