AWS Shield Advanced Enhances DDoS Protection with New Rule Group

AWS Shield Advanced is integrating the AWS WAF Anti-DDoS managed rule group for application-layer DDoS protection. This change, effective July 27, 2026, will enhance the detection and mitigation of HTTP request floods, which are common attack vectors. The new rule group operates in Count mode initially, allowing for a smooth transition without disrupting existing traffic flows. AWS Shield Advanced will eventually retire its previous L7 automatic mitigation on January 1, 2027, making the Anti-DDoS managed rule group the default protection. The rule group features a Challenge action to filter out automated traffic while ensuring legitimate users are not interrupted. Users can configure sensitivity levels for blocking and challenging traffic, allowing for tailored security postures. The upgrade is designed to be seamless, with no gaps in protection during the transition.

Key Points: • AWS Shield Advanced is adopting the Anti-DDoS managed rule group for enhanced DDoS protection. • The transition to the new rule group began on July 27, 2026, with a retirement of the old system set for January 1, 2027. • The new system includes features like Challenge actions to minimize disruption for legitimate users.