I have hosted my blog Amazon Web Services S3 (static files with hosting). Should I add any policies or measure to further protect my account from DDoS/high bandwidth consumption?
Another way to improve your readiness to respond to and mitigate DDoS attacks is by subscribing to AWS Shield Advanced. You receive tailored detection based on: Specific traffic patterns of your application. Protection against Layer 7 DDoS attacks including AWS WAF at no additional cost.
AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.
For infrastructure layer attacks, you can use AWS services such as Amazon CloudFront and Elastic Load Balancing (ELB) to provide automatic DDoS protection. For more information, see AWS best practices for DDoS resiliency. For application layer attacks, you can use AWS WAF as the primary mitigation.
AWS Shield is a managed service that provides protection against Distributed Denial of Service (DDoS) attacks for applications running on AWS.
I would argue that it is a concert. Not on the technology side, but certainly on the financial side. If for some reason your content is downloaded excessively from S3, you are paying for it.
If you want the content accessible by all, then there is no S3 policy that can help you.
If you want to track your spending, I suggest using AWS Billing Alerts. You can use a CloudWatch alert to send a message to SNS (and to your email) once your total bill for the month gets to X dollars.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With