By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

How can we add NLB's EIP for shield advanced protection for AWS auto-assigned IPs

0

Hello, Internet facing NLB IPs doesn't come up under resources to protect even if we choose EIPs in Shield UI. Is it true that in order to enable shield advanced for NLBs, it had to be assigned to customer created EIPs as opposed to Amazon created IPs?

Thanks,

Topics
Security, Identity, & ComplianceNetworking & Content Delivery
Tags
AWS ShieldElastic Load Balancing
Language
English
AWS-User-0677876
asked 5 years ago1024 views
1 Answer
0
Accepted Answer

Is it true that in order to enable shield advanced for NLBs, it had to be assigned to customer created EIPs as opposed to Amazon created IPs?

Correct - Shield Advanced will only list the rsources if the NLB has been setup via a static EIP (instead of just subnets - which will assign a random public IP). So the correct way would be to Allocate a new address, then spin-up an ELB with EIP instead of subnets. Once done, it'll show up in Shield Advance to configure resource protection.

AWS
EXPERT
Shakeel_A
answered 5 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content