AWS automatically protects against low-level, brute-force attacks, such as DDoS, through its built-in infrastructure and network architecture. AWS infrastructure reaches across the globe and includes multiple Regions, AZs, and edge locations.

AWS Protection through infrastructure

  1. Security Group
    • only allow in proper request traffic.
  2. Elastic Load Balancing
    • handles traffic first before handing it off, so your frontend server is not overwhelmed.
  3. AWS Regions
    • the enormous capacity of Regions make them extremely difficult to overwhelm.

AWS Protection through services

  1. AWS Shield
  2. AWS WAF