Individual skill
shieldadvanced
Configures AWS Shield Advanced for enhanced Distributed Denial of Service (DDoS) protection: subscribing accounts and adding resource protections, enabling automatic application layer (layer 7) mitigation through AWS WAF, configuring health-based detection with Route 53 health checks, setting up Shield Response Team (SRT) access and proactive engagement, reviewing DDoS events and requesting cost protection credits, and aggregating resources into protection groups. Applicable when the user wants stronger DDoS protection for internet-facing resources (CloudFront, Application or Network Load Balancers, Elastic IP addresses, Global Accelerator, or Route 53 hosted zones), wants expert help during an attack, or wants to recover attack-driven scaling charges. Routes to the right per-task procedure in references. Not applicable for authoring AWS WAF rules (waf skill), creating Route 53 health checks (route53 skill), or org-wide Shield Advanced rollout with Firewall Manager (firewallmanager skill).
skills/specialized-skills/networking-and-content-delivery-skills/shieldadvanced/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,438
- Repository last updated
- Nov 8, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 8,795 bytesreferences/aggregating-resources-into-protection-groups.mddoc · 12,214 bytesreferences/configuring-health-based-detection.mddoc · 13,101 bytesreferences/deciding-between-shield-standard-and-advanced.mddoc · 11,945 bytesreferences/enabling-automatic-application-layer-mitigation.mddoc · 12,951 bytesreferences/reviewing-ddos-events-and-requesting-cost-protection.mddoc · 12,461 bytesreferences/setting-up-srt-support-and-proactive-engagement.mddoc · 13,456 bytesreferences/subscribing-to-shield-advanced-and-protecting-resources.mddoc · 12,028 bytes
Read excerpt
# AWS Shield Advanced
## Overview
Domain expertise for configuring AWS Shield Advanced, the paid tier that adds enhanced Distributed
Denial of Service (DDoS) protection, automatic application layer mitigation, attack visibility, expert support, and
cost protection on top of the always-on AWS Shield Standard. Covers subscribing and protecting
resources, automatic application layer mitigation, health-based detection, Shield Response Team
(SRT) access and proactive engagement, event review and cost protection credits, and protection
groups.
This skill is a router. Each customer task maps to a procedure file under `references/`. Read the
matching reference in full before acting, then follow its constraints and steps. The reference
files are self-contained: each carries its own decision tables, constraints, procedure, and