Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Protecting Amazon Web Services (AWS) S3 from DDoS attacks

I have hosted my blog Amazon Web Services S3 (static files with hosting). Should I add any policies or measure to further protect my account from DDoS/high bandwidth consumption?

like image 556
sarat Avatar asked Mar 25 '13 19:03

sarat


People also ask

How do I protect AWS DDoS attacks?

Another way to improve your readiness to respond to and mitigate DDoS attacks is by subscribing to AWS Shield Advanced. You receive tailored detection based on: Specific traffic patterns of your application. Protection against Layer 7 DDoS attacks including AWS WAF at no additional cost.

What service does AWS provide to help protect AWS customers from DDoS attacks?

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

Does AWS WAF provide DDoS protection?

For infrastructure layer attacks, you can use AWS services such as Amazon CloudFront and Elastic Load Balancing (ELB) to provide automatic DDoS protection. For more information, see AWS best practices for DDoS resiliency. For application layer attacks, you can use AWS WAF as the primary mitigation.

Which AWS services only role is to safeguard running applications from DDoS attacks?

AWS Shield is a managed service that provides protection against Distributed Denial of Service (DDoS) attacks for applications running on AWS.


1 Answers

I would argue that it is a concert. Not on the technology side, but certainly on the financial side. If for some reason your content is downloaded excessively from S3, you are paying for it.

If you want the content accessible by all, then there is no S3 policy that can help you.

If you want to track your spending, I suggest using AWS Billing Alerts. You can use a CloudWatch alert to send a message to SNS (and to your email) once your total bill for the month gets to X dollars.

like image 72
Peter Sankauskas Avatar answered Nov 08 '22 18:11

Peter Sankauskas