Posted On: Mar 5, 2021

AWS Shield Advanced now supports tagging of protected resources and protection groups. You can use tagging to restrict the ability to create or modify protections to sensitive resources via IAM policies, or to organize and track your AWS Shield Advanced costs at the tag level. Resource tagging allows you to define custom names for protected application resources, such as Amazon Elastic Compute Cloud (EC2), Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator and Amazon Route 53.  

To associate tags with Shield Advanced protections, log into the Shield Console and navigate to the protected resources tab. From there you can add, edit, or delete tags from existing protected resources or protection groups. Tags can also be added when creating new protections or protection groups through the creation wizard, or through the Shield Advanced API.  

Resource tagging is available to AWS Shield Advanced subscribers at no additional cost. To view the list of AWS Regions where AWS Shield Advanced is currently available, see the AWS Region Table . For more details, visit the Shield Advanced Developer guide for more details.