AWS Shield Advanced adds DDoS attack flow logs
AWS Shield Advanced now offers DDoS attack flow logs, providing packet-level visibility into traffic during attacks. This feature aids forensic analysis and compliance by publishing detailed log data to S3, CloudWatch Logs, or Data Firehose. Available in all Shield Advanced regions, it requires protection with Shield Advanced and log delivery configuration.
- →DDoS attack flow logs for packet-level visibility
- →Log data export to S3, CloudWatch Logs, or Data Firehose
- →Prerequisites and availability for flow logs
Features (1) ›
- DDoS attack flow logs for packet-level visibility
AWS Shield Advanced now provides DDoS attack flow logs, offering packet-level insights into traffic during attacks. Log data includes source/destination IPs, ports, protocols, packet/byte counts, and source country, published at 5-minute intervals during active attacks.
Enhancements (1) ›
- Log data export to S3, CloudWatch Logs, or Data Firehose
DDoS attack flow logs can be automatically published to Amazon S3, Amazon CloudWatch Logs, or Amazon Data Firehose. This enables forensic analysis, compliance reporting, post-incident investigation, and threat intelligence gathering.
Notes (1) ›
- Prerequisites and availability for flow logs
To enable this feature, resources must be protected by Shield Advanced, and log delivery must be configured. DDoS attack flow logs are available in all AWS regions where AWS Shield Advanced is offered.
https://aws.amazon.com/about-aws/whats-new/2026/05/aws-shield-ddos/
Related releases
- AWS Glue zero-ETL Integrations Gain Table Property Ownership and Conflict Detection AWS What's New ·
- AWS Lambda adds direct read configuration for Amazon S3 Files AWS What's New ·
- SageMaker HyperPod adds model caching for faster inference autoscaling AWS What's New ·
- Amazon Bedrock Knowledge Base adds TwelveLabs Marengo 3.0 for multimodal embeddings AWS What's New ·
- AWS Lambda recursive loop detection now available in Europe Sovereign Cloud AWS What's New ·
- AWS Storage Gateway adds FIPS-compliant private connectivity for S3 File Gateway AWS What's New ·