# AWS DDOS

#### **AWS DDoS (Distributed Denial of Service) Protection**

AWS provides robust measures to mitigate DDoS attacks that aim to disrupt service availability.

***

#### **Common DDoS Attack Types**

1. **UDP Flood**:
   * Overwhelms servers with a high volume of UDP packets, consuming bandwidth and server resources.
2. **TCP Flood**:
   * Exhausts server connections by sending a large number of incomplete TCP handshake requests. This can be mitigated using security groups, Network ACLs & AWS Shield
3. **Slowloris Attack**:
   * Holds connections open by sending partial requests, preventing the server from accepting new ones. This can be mitigated using AWS Load Balancer

***

## <img src="https://2332860236-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq6mjlFfyDOi3mV0lemKE%2Fuploads%2FpsTgwGXUXdUJZj6l48Q5%2Fimage_2025-04-10_182631483.png?alt=media&#x26;token=3afb81ad-9179-4f69-b336-64f5f131b926" alt="" data-size="line"> **AWS Shield**

1. **AWS Shield Standard**:
   * Automatic protection against common, low-complexity DDoS attacks.
   * Built into AWS services at no additional cost.
2. **AWS Shield Advanced**:
   * Enhanced DDoS protection for applications hosted on AWS.
   * Features:
     * Detailed attack diagnostics.
     * Cost protection against attack-related usage spikes.
     * 24/7 support from the DDoS Response Team (DRT).

AWS Shield, combined with other AWS security services, helps maintain application availability even during DDoS attacks.

***

<figure><img src="https://2332860236-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fq6mjlFfyDOi3mV0lemKE%2Fuploads%2FSh61IiXXIZztwZlxn4oF%2Fimage.png?alt=media&#x26;token=8757da5e-3033-4db5-a75e-fadb48b4cc7b" alt=""><figcaption></figcaption></figure>