Shield — AWS Shield

AWS docs: https://docs.aws.amazon.com/waf/latest/DDOSAPIReference/Welcome.html

AWS Shield (DDoS protection) uses the application/x-amz-json-1.1 protocol. Operations are identified by the X-Amz-Target header with the prefix AWSShield_20160616..

---

Notes

• Target dispatch header: X-Amz-Target: AWSShield_20160616.<Operation>.
• Unrecognized operations return a JSON 501 Not Implemented error response.
• Protection resources are stored but Shield Advanced features (e.g. DDoS cost protection, response team) are not emulated.

Summary

Category	✅ Supported
Subscription	1
Protections	4
Tags	3

---

Endpoints

Subscription

Operation	Status	Notes	AWS Docs
DescribeSubscription	✅ Supported	Returns a minimal active subscription object	docs

Protections

Operation	Status	Notes	AWS Docs
CreateProtection	✅ Supported	Creates a protection; requires Name and ARN	docs
DescribeProtection	✅ Supported	Lookup by ProtectionId or ResourceArn	docs
ListProtections	✅ Supported	Lists all protections	docs
DeleteProtection	✅ Supported	Deletes a protection by ID	docs

Tags

Operation	Status	Notes	AWS Docs
TagResource	✅ Supported	Adds/updates tags on a protection	docs
UntagResource	✅ Supported	Removes tag keys from a protection	docs
ListTagsForResource	✅ Supported	Lists tags on a protection	docs