Lightsail WordPress instance DDOS egress bandwidth protection.


Does Aws LightSail have shield protection, and does that Cover egress fees if I receive a DDOS Attack,

If not, can I set a cap on egress fees?

Or are there any other methods to prevent this?

It wouldn't be a fun experience waking up to a massive AWS bill.

I appreciate any help you can provide.

asked 2 months ago221 views
1 Answer

AWS Lightsail provides basic DDoS protection through AWS Shield Standard, which covers Layer 3 and Layer 4 attacks, but does not include egress fee coverage during a DDoS attack. There is no direct way to set a cap on egress fees in Lightsail, but you can monitor bandwidth usage and set up billing alerts to prevent unexpected charges.

For enhanced protection against Layer 7 attacks, consider fronting your Lightsail instance with a self-managed ALB or CloudFront distribution, coupled with AWS WAF to block malicious traffic. While AWS Shield Advanced offers comprehensive protection and cost coverage for scaling during a DDoS attack, its $3,000 monthly subscription fee may not be suitable for all users.

It would be beneficial to review the AWS Best Practices for DDoS Resiliency to determine the best approach for your specific use case.

profile picture
answered 2 months ago
profile picture
reviewed 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions