AWS Shield Standard works in combination with Amazon CloudFront and Amazon Route 53, in order to protect against attacks at Layers 3 and 4 of the Open Systems Interconnection (OSI) stack. At the application layer, AWS Web Application Firewall (WAF) can be used, by writing custom rules to handle these kinds of attacks.

AWS Shield Advanced extends protection to individual elastic IP addresses, without any need to make changes to your application's routing. It can also automatically mitigate things, such as HTTP and DNS query floods, at the application level. AWS Shield Advanced is another good reason to have at least Business-level support on your AWS account. With Business or Enterprise support, you get quick access to the AWS DDoS Response Team (DRT), which will help you to deal with sudden, large-scale attacks.

AWS Shield Advanced also gives you detailed visibility into attacks as they happen, either via the console or CloudWatch.