**Introducing a new console experience for Amazon WAF**

You can now use the updated experience to access Amazon WAF functionality anywhere in the console. For more details, see [Working with the console](https://docs.amazonaws.cn/waf/latest/developerguide/working-with-console.html). 

# Removing Amazon Shield Advanced protection from an Amazon resource
<a name="remove-protection"></a>

You can remove Amazon Shield Advanced protection from any of your Amazon resources at any time. 

**Important**  
Deleting an Amazon resource doesn't remove the resource from Amazon Shield Advanced. You must also remove the protection on the resource from Amazon Shield Advanced, as described in this procedure.

**Remove Amazon Shield Advanced protection from an Amazon resource**

1. Sign in to the Amazon Web Services Management Console and open the Amazon WAF & Shield console at [https://console.amazonaws.cn/wafv2/](https://console.amazonaws.cn/wafv2/). 

1. In the Amazon Shield navigation pane, choose **Protected resources**.

1. In the **Protections** tab, select the resources whose protections you want to remove. 

1. Choose **Delete protections**.

   1. If you have an Amazon CloudWatch alarm configured for a protection, you are given the option to delete the alarm along with the protection. If you choose not to delete the alarm at this point, you can instead delete it later using the CloudWatch console.
**Note**  
For protections that have an Amazon Route 53 health check configured, if you add the protection again later, the protection still includes the health check. 

The preceding steps remove Amazon Shield Advanced protection from specific Amazon resources. They don't cancel your Amazon Shield Advanced subscription. You will continue to be charged for the service. For information about your Amazon Shield Advanced subscription, contact the [Amazon Web Services Support Center](https://console.amazonaws.cn/support/home#/).

## Removing a CloudWatch alarm from your Shield Advanced protections
<a name="remove-cloudwatch-ddos"></a>

To remove a CloudWatch alarm from your Shield Advanced protections, do one of the following:
+ Delete the protection as described in [Removing Amazon Shield Advanced protection from an Amazon resource](#remove-protection). Be sure to select the check box next to **Also delete related DDoSDetection alarm**.
+ Delete the alarm using the CloudWatch console. The name of the alarm to delete starts with **DDoSDetectedAlarmForProtection**.