AWS Shield Standard provides protection for all AWS customers from common, most frequently occurring network and transport layer DDoS attacks that target your web site or application at no additional charge.

AWS Shield Advanced is a paid service that provides additional protections for applications running on Elastic Load Balancing (ELB), Amazon CloudFront, and Amazon Route 53. AWS Shield Advanced is available to customers who are enrolled in either the Enterprise or Business Support levels of AWS Premium Support. It requires a 1-year subscription commitment and charges a monthly fee, plus a usage fee based on data transfer out from Amazon CloudFront and Elastic Load Balancing (ELB).

AWS Shield Advanced charges are in addition to the standard fees for Elastic Load Balancing (ELB), Amazon CloudFront, and Amazon Route 53.

AWS Shield is now generally available

Try AWS Shield for Free

 

 

Pricing

AWS Shield Standard

AWS Shield Advanced


Subscription Commitment

None

1 year*


Monthly Fee

[This fee applies per organization subscribed to AWS Shield Advanced. If your organization has multiple AWS accounts, you will pay the monthly fee once as long as the AWS accounts are all under a single consolidated billing, and you own all the AWS accounts and resources in those accounts.]

 

No Additional Cost

$3,000


Data Transfer Out Usage Fees

[In addition to standard fees on Elastic Load Balancing (ELB), Amazon CloudFront and Amazon Route 53]

No Additional Cost

Elastic Load Balancing (ELB)
   
  Data Transfer Out Price ($ per GB)    
First 100TB $0.050    
Next 400TB $0.040    
Next 500TB $0.030    
Above 1PB Contact Us    
Amazon CloudFront    
  Data Transfer Out Price ($ per GB)    
First 100TB $0.025    
Next 400TB $0.020    
Next 500TB $0.015    
Next 4PB
$0.010    
Above 5PB Contact Us    

Amazon Route 53

No additional cost for Amazon Route 53 usage


Note: If you have deployed Amazon CloudFront in front of ELB, you only need to enable protection for Amazon CloudFront.

Note: AWS Shield Advanced is offered only for the protection of eligible AWS resources directly owned and managed by the subscribing AWS Account holder.

*All AWS Shield Advanced benefits, including DDoS cost protection, are subject to your fulfillment of the 1-year subscription commitment.


AWS Shield Standard is automatically enabled when you use AWS services like Elastic Load Balancing (ELB), Application Load Balancer, Amazon CloudFront and Amazon Route 53. You pay only the standard fees described in the pricing pages for these AWS services.


Let’s assume you enable AWS WAF protections in addition to AWS Shield Standard.

Under this scenario, you pay the standard AWS WAF fees as described in the AWS WAF Pricing page.


Let’s assume that you have Application Load Balancer with Regional Data Transfer out usage of 1,000 GB per month. You subscribe your AWS Account for AWS Shield Advanced and enable protection for your Application Load Balancer.

Under this scenario, at the end of the month, you will pay the AWS Shield Advanced monthly fee of $3,000. In addition to the monthly fee you will be charged the AWS Shield Advanced usage based fee of $50 for the 1,000 GB of Regional Data Transfer out at $0.050 per GB. Your total AWS Shield charges for the month will be $3,000 + $50 = $3,050.

In addition, you will pay standard Application Load Balancer fees as described in the Application Load Balancer Pricing page.


Let’s assume that you deploy an Amazon CloudFront Distribution in front of the Application Load Balancer from Example 3. You then enable AWS Shield Advanced protection for your Amazon CloudFront Distribution, and remove it from your Application Load Balancer. (If you have deployed Amazon CloudFront in front of Application Load Balancer, you only need to enable protection for Amazon CloudFront).

Under this scenario, at the end of the month, you will pay the AWS Shield Advanced monthly fee of $3,000. In addition to the monthly fee, you will be charged the AWS Shield Advanced usage based fee of $25 for the 1,000 GB of Regional Data Transfer out at $0.025 per GB. Your total AWS Shield charges for the month will be $3,000 + $25 = $3,025.

In addition, you will pay standard Application Load Balancer and Amazon CloudFront fees as described in the Application Load Balancer Pricing and Amazon CloudFront Pricing pages.


Let’s assume that you enable AWS WAF protections on the Amazon CloudFront Distribution from Example 4. Because the Amazon CloudFront Distribution is already protected under AWS Shield Advanced, there are no additional charges for AWS WAF. Your total AWS Shield charges for the month remain at $3,025.

In addition, you will pay standard Application Load Balancer and Amazon CloudFront fees as described in the Application Load Balancer Pricing and Amazon CloudFront Pricing pages.