Does Amazon beanstalk automatically prevent DDoS

Question

Does Amazon Beanstalk automatically prevent (distributed) denial of service attack? If not, whats the most convenient way to do so?

Answer 1

No it doesn't prevent DoS attacks, you'll have to detect and prevent such attacks by yourself. There are differnt ways to protect your application against DoS attacks, you can google for it. Here are a few links which may help you:

• aiCache DoS attack identification and mitigation
• Amazon Web Services: Overview of Security Processes
• Wikipedia: SYN cookies
• Amazon Forum: DoS attack

Answer 2

I believe it does

New – AWS Shield AWS Shield is a new managed service that protects your web applications against DDoS (Distributed Denial of Service) attacks. It works in conjunction with Elastic Load Balancing, Amazon CloudFront, and Amazon Route 53 and protects you from DDoS attacks of many types, shapes, and sizes. There are two tiers of service:

AWS Shield Standard is available to all AWS customers at no extra cost. It protects you from 96% of the most common attacks today, including SYN/ACK floods, Reflection attacks, and HTTP slow reads. This protection is applied automatically and transparently to your Elastic Load Balancers, CloudFront distributions, and Route 53 resources.

AWS Shield Advanced provides additional DDoS mitigation capability for volumetric attacks, intelligent attack detection, and mitigation for attacks at the application & network layers. You get 24×7 access to our DDoS Response Team (DRT) for custom mitigation during attacks, advanced real time metrics and reports, and DDoS cost protection to guard against bill spikes in the aftermath of a DDoS attack.

https://aws.amazon.com/blogs/aws/aws-shield-protect-your-applications-from-ddos-attacks/

Answer 3

There are several kinds of doss. Since your ec2 public IP address is behind aws eb, I think your ec2 instance is at least safe from layer3/4 ddos.