Enables Shield Advanced for a specific Amazon Web Services resource¶
Description¶
Enables Shield Advanced for a specific Amazon Web Services resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.
You can add protection to only a single resource with each create_protection request. You can add protection to multiple resources at once through the Shield Advanced console at https://console.aws.amazon.com/wafv2/shieldv2#/. For more information see Getting Started with Shield Advanced and Adding Shield Advanced protection to Amazon Web Services resources.
Usage¶
Arguments¶
-
Name[required] Friendly name for the
Protectionyou are creating. -
ResourceArn[required] The ARN (Amazon Resource Name) of the resource to be protected.
The ARN should be in one of the following formats:
- For an Application Load Balancer:
arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id - For an Elastic Load Balancer (Classic Load Balancer):
arn:aws:elasticloadbalancing:region:account-id:loadbalancer/load-balancer-name - For an Amazon CloudFront distribution:
arn:aws:cloudfront::account-id:distribution/distribution-id - For an Global Accelerator standard accelerator:
arn:aws:globalaccelerator::account-id:accelerator/accelerator-id - For Amazon Route 53:
arn:aws:route53:::hostedzone/hosted-zone-id - For an Elastic IP address:
arn:aws:ec2:region:account-id:eip-allocation/allocation-id
- For an Application Load Balancer:
-
TagsOne or more tag key-value pairs for the Protection object that is created.
Value¶
A list with the following syntax: