AWS Shield for DDoS protection - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable AWS Shield Advanced protection on a resource.

AWS

aws shield create-protection --name MyProtection --resource-arn [1]

Drag options to blanks, or click blank then click option'

Aarn:aws:lambda:region:account-id:function:function-name

Barn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/my-load-balancer/50dc6c495c0c9188

Carn:aws:s3:::my-bucket

Darn:aws:ec2:region:account-id:instance/instance-id

Attempts:

3 left

💡 Hint

Common Mistakes

Using an ARN for unsupported resources like EC2 instances or S3 buckets.

Not providing the full ARN format.

The resource ARN must be for a supported resource like an Application Load Balancer to enable AWS Shield Advanced protection.

2fill in blank

medium

Complete the code to list all protections enabled in AWS Shield.

AWS

aws shield list-[1]

Drag options to blanks, or click blank then click option'

Aresources

Battacks

Cprotections

Dalerts

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'list-resources' which is not a valid AWS Shield command.

Confusing 'attacks' with protections.

The command 'list-protections' lists all the protections enabled in AWS Shield.

3fill in blank

hard

Fix the error in the command to describe a DDoS attack by its ID.

AWS

aws shield describe-attack --[1]

Drag options to blanks, or click blank then click option'

Aattack-id

Battack_id

CattackID

DattackId

Attempts:

3 left

💡 Hint

Common Mistakes

Using camelCase or underscores in parameter names.

Misspelling the parameter name.

The correct parameter name is '--attack-id' with hyphens, matching AWS CLI syntax.

4fill in blank

hard

Fill both blanks to create a Shield protection and specify the resource ARN.

AWS

aws shield create-protection --name [1] --resource-arn [2]

Drag options to blanks, or click blank then click option'

AMyWebAppProtection

BMyBucketProtection

Carn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/my-load-balancer/50dc6c495c0c9188

Darn:aws:s3:::my-bucket

Attempts:

3 left

💡 Hint

Common Mistakes

Using an S3 bucket ARN which is not supported for Shield Advanced protection.

Using generic or unclear protection names.

The protection name should be descriptive like 'MyWebAppProtection' and the resource ARN must be a supported resource like a load balancer ARN.

5fill in blank

hard

Fill all three blanks to create a Shield protection, enable automatic response, and specify the resource ARN.

AWS

aws shield create-protection --name [1] --resource-arn [2] --[3]

Drag options to blanks, or click blank then click option'

AAutoMitigationProtection

Barn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/my-load-balancer/50dc6c495c0c9188

Cenable-automatic-response

Ddisable-automatic-response

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'disable-automatic-response' when the goal is to enable it.

Using unsupported resource ARNs.

Using unclear protection names.

Use a descriptive protection name, specify the load balancer ARN, and enable automatic response to mitigate attacks automatically.