Amazon Shield Advanced protected resources - Amazon WAF, Amazon Firewall Manager, and Amazon Shield Advanced
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Shield Advanced protected resources


Shield Advanced protections are only enabled for resources that you have explicitly specified in Shield Advanced or that you protect through an Amazon Firewall Manager Shield Advanced policy. Shield Advanced doesn't automatically protect your resources.

You can use Shield Advanced for advanced monitoring and protection with the following resource types:

  • Amazon CloudFront distributions. For CloudFront continuous deployment, Shield Advanced protects any staging distribution that's associated with a protected primary distribution.

  • Amazon Route 53 hosted zones.

  • Amazon Global Accelerator standard accelerators.

  • Amazon EC2 Elastic IP addresses. Shield Advanced protects the resources that are associated with protected Elastic IP addresses.

  • Amazon EC2 instances, through association to Amazon EC2 Elastic IP addresses.

  • The following Elastic Load Balancing (ELB) load balancers:

    • Application Load Balancers.

    • Classic Load Balancers.

    • Network Load Balancers, through associations to Amazon EC2 Elastic IP addresses.

For additional information about protections for these resource types, see Amazon Shield Advanced protections by resource type.