AWS Security Blog

Now You Can Monitor DDoS Attack Trends with AWS Shield Advanced

July 29, 2025: AWS Shield Advanced has expanded its DDoS protection suite by introducing Automatic Application Layer DDoS Mitigation, along with new capabilities like protection groups and mitigation metrics to improve and monitor DDoS attack detection and mitigation. These enhancements build upon the original Global Threat Environment Dashboard, providing users with more comprehensive tools to monitor and respond to DDoS threats.

AWS Shield Advanced has consistently notified you about DDoS attacks on your applications via the AWS Management Console and API as well as Amazon CloudWatch metrics. Today, we added the global threat environment dashboard to AWS Shield Advanced to allow you to view trends and metrics about DDoS attacks across Amazon CloudFront, Elastic Load Balancing, and Amazon Route 53. This information can help you understand the DDoS target profile of the AWS services you use and, in turn, can help you create a more resilient and distributed architecture for your application.

The global threat environment dashboard shows comprehensive and straightforward data about DDoS attacks, as shown in the following figure. The dashboard displays a summary of the global threat environment, including the largest threats, top vectors, and the relative number of significant DDoS attacks. You also can view the dashboard for different time durations to give you a history of DDoS attacks.

To get started with the global threat environment dashboard:

  1. Sign in to the AWS Management Console and navigate to the AWS WAF and AWS Shield console.
  2. To activate AWS Shield Advanced, choose Protected resources in the navigation pane, choose Activate AWS Shield Advanced, and then accept the terms by typing I accept.
  3. Navigate to the global threat environment dashboard through the navigation pane.
  4. Choose your desired time period from the time period drop-down menu in the top right part of the page.

You can use the information on the global threat environment dashboard to understand the threat landscape as well as to inform decisions you make that will help to better protect your AWS resources.

To learn more information, see Global Threat Environment Dashboard: View DDoS Attack Trends Across AWS.

– Ritwik