aws_shield

AWS Shield Advanced

Summary

Functions

• associate_d_r_t_log_bucket(Client, Input)
  Authorizes the DDoS Response Team (DRT) to access the specified Amazon S3 bucket containing your AWS WAF logs.
• associate_d_r_t_log_bucket(Client, Input, Options)
• associate_d_r_t_role(Client, Input)
  Authorizes the DDoS Response Team (DRT), using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks.
• associate_d_r_t_role(Client, Input, Options)
• associate_health_check(Client, Input)
  Adds health-based detection to the Shield Advanced protection for a resource.
• associate_health_check(Client, Input, Options)
• associate_proactive_engagement_details(Client, Input)
  Initializes proactive engagement and sets the list of contacts for the DDoS Response Team (DRT) to use.
• associate_proactive_engagement_details(Client, Input, Options)
• create_protection(Client, Input)
  Enables AWS Shield Advanced for a specific AWS resource.
• create_protection(Client, Input, Options)
• create_subscription(Client, Input)
  Activates AWS Shield Advanced for an account.
• create_subscription(Client, Input, Options)
• delete_protection(Client, Input)
  Deletes an AWS Shield Advanced Protection.
• delete_protection(Client, Input, Options)
• delete_subscription(Client, Input)
  Removes AWS Shield Advanced from an account.
• delete_subscription(Client, Input, Options)
• describe_attack(Client, Input)
  Describes the details of a DDoS attack.
• describe_attack(Client, Input, Options)
• describe_d_r_t_access(Client, Input)
  Returns the current role and list of Amazon S3 log buckets used by the DDoS Response Team (DRT) to access your AWS account while assisting with attack mitigation.
• describe_d_r_t_access(Client, Input, Options)
• describe_emergency_contact_settings(Client, Input)
  A list of email addresses and phone numbers that the DDoS Response Team (DRT) can use to contact you if you have proactive engagement enabled, for escalations to the DRT and to initiate proactive customer support.
• describe_emergency_contact_settings(Client, Input, Options)
• describe_protection(Client, Input)
  Lists the details of a Protection object.
• describe_protection(Client, Input, Options)
• describe_subscription(Client, Input)
  Provides details about the AWS Shield Advanced subscription for an account.
• describe_subscription(Client, Input, Options)
• disable_proactive_engagement(Client, Input)
  Removes authorization from the DDoS Response Team (DRT) to notify contacts about escalations to the DRT and to initiate proactive customer support.
• disable_proactive_engagement(Client, Input, Options)
• disassociate_d_r_t_log_bucket(Client, Input)
  Removes the DDoS Response Team's (DRT) access to the specified Amazon S3 bucket containing your AWS WAF logs.
• disassociate_d_r_t_log_bucket(Client, Input, Options)
• disassociate_d_r_t_role(Client, Input)
  Removes the DDoS Response Team's (DRT) access to your AWS account.
• disassociate_d_r_t_role(Client, Input, Options)
• disassociate_health_check(Client, Input)
  Removes health-based detection from the Shield Advanced protection for a resource.
• disassociate_health_check(Client, Input, Options)
• enable_proactive_engagement(Client, Input)
  Authorizes the DDoS Response Team (DRT) to use email and phone to notify contacts about escalations to the DRT and to initiate proactive customer support.
• enable_proactive_engagement(Client, Input, Options)
• get_subscription_state(Client, Input)
  Returns the SubscriptionState, either Active or Inactive.
• get_subscription_state(Client, Input, Options)
• list_attacks(Client, Input)
  Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
• list_attacks(Client, Input, Options)
• list_protections(Client, Input)
  Lists all Protection objects for the account.
• list_protections(Client, Input, Options)
• update_emergency_contact_settings(Client, Input)
  Updates the details of the list of email addresses and phone numbers that the DDoS Response Team (DRT) can use to contact you if you have proactive engagement enabled, for escalations to the DRT and to initiate proactive customer support.
• update_emergency_contact_settings(Client, Input, Options)
• update_subscription(Client, Input)
  Updates the details of an existing subscription.
• update_subscription(Client, Input, Options)

Functions

Authorizes the DDoS Response Team (DRT) to access the specified Amazon S3 bucket containing your AWS WAF logs. You can associate up to 10 Amazon S3 buckets with your subscription.

Authorizes the DDoS Response Team (DRT), using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the DRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs.

You can associate only one RoleArn with your subscription. If you submit an AssociateDRTRole request for an account that already has an associated role, the new RoleArn will replace the existing RoleArn.

Prior to making the AssociateDRTRole request, you must attach the AWSShieldDRTAccessPolicy managed policy to the role you will specify in the request. For more information see Attaching and Detaching IAM Policies. The role must also trust the service principal drt.shield.amazonaws.com. For more information, see IAM JSON Policy Elements: Principal.

The DRT will have access only to your AWS WAF and Shield resources. By submitting this request, you authorize the DRT to inspect your AWS WAF and Shield configuration and create and update AWS WAF rules and web ACLs on your behalf. The DRT takes these actions only if explicitly authorized by you.

You must have the iam:PassRole permission to make an AssociateDRTRole request. For more information, see Granting a User Permissions to Pass a Role to an AWS Service.

Adds health-based detection to the Shield Advanced protection for a resource. Shield Advanced health-based detection uses the health of your AWS resource to improve responsiveness and accuracy in attack detection and mitigation.

Initializes proactive engagement and sets the list of contacts for the DDoS Response Team (DRT) to use. You must provide at least one phone number in the emergency contact list.

After you have initialized proactive engagement using this call, to disable or enable proactive engagement, use the calls DisableProactiveEngagement and EnableProactiveEngagement.

Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Elastic Load Balancing load balancer, AWS Global Accelerator accelerator, Elastic IP Address, or an Amazon Route 53 hosted zone.

Activates AWS Shield Advanced for an account.

Deletes an AWS Shield Advanced Protection.

Removes AWS Shield Advanced from an account. AWS Shield Advanced requires a 1-year subscription commitment. You cannot delete a subscription prior to the completion of that commitment.

Describes the details of a DDoS attack.

Returns the current role and list of Amazon S3 log buckets used by the DDoS Response Team (DRT) to access your AWS account while assisting with attack mitigation.

A list of email addresses and phone numbers that the DDoS Response Team (DRT) can use to contact you if you have proactive engagement enabled, for escalations to the DRT and to initiate proactive customer support.

Lists the details of a Protection object.

Provides details about the AWS Shield Advanced subscription for an account.

Removes authorization from the DDoS Response Team (DRT) to notify contacts about escalations to the DRT and to initiate proactive customer support.

Removes the DDoS Response Team's (DRT) access to the specified Amazon S3 bucket containing your AWS WAF logs.

Removes the DDoS Response Team's (DRT) access to your AWS account.

Removes health-based detection from the Shield Advanced protection for a resource. Shield Advanced health-based detection uses the health of your AWS resource to improve responsiveness and accuracy in attack detection and mitigation.

Authorizes the DDoS Response Team (DRT) to use email and phone to notify contacts about escalations to the DRT and to initiate proactive customer support.

Returns the SubscriptionState, either Active or Inactive.

Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.

Lists all Protection objects for the account.

Updates the details of the list of email addresses and phone numbers that the DDoS Response Team (DRT) can use to contact you if you have proactive engagement enabled, for escalations to the DRT and to initiate proactive customer support.

Updates the details of an existing subscription. Only enter values for parameters you want to change. Empty parameters are not updated.