AWS Shield is a managed DDoS protection service that protects your web applications on AWS from DDoS attacks. AWS Shield Standard is available to all AWS customers at no additional cost, and protects your applications from the most common, frequently occurring DDoS attacks. If you need a higher level of protection against large and sophisticated attacks, you can subscribe to AWS Shield Advanced to protect your applications on Elastic Load Balancing, Amazon CloudFront and Amazon Route 53. With AWS Shield Advanced, you also get access to AWS WAF at no additional cost, giving you the flexibility to write customized mitigations against application layer attacks. AWS Shield Advanced also provides 24X7 access to the DDoS Response Team (DRT) who can apply custom mitigations on your behalf and DDoS Cost Protection, to protect your AWS bill against usage fee surges during mitigation of a DDoS attack.