AWS Shield Advanced Status Verification Audit Trail

Flowtriq + AWS Shield
Advanced

Verify AWS Shield Advanced subscription status during DDoS incidents. Flowtriq confirms your Shield protection is active when attacks are detected and logs protection status for compliance and audit trails.

Start free trial → Talk to us

How It Works

ftagent

Monitors traffic

Flowtriq

Detects DDoS attack

AWS Shield API

GetSubscriptionState

Shield Status

Active / Inactive logged

Setup

Connect in three steps

1. Create an IAM policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "shield:GetSubscriptionState",
      "Resource": "*"
    }
  ]
}

2. Create IAM access keys

AWS Console > IAM > Users > Create user
Attach the policy above
Security Credentials > Create access key

3. Configure in Flowtriq

Flowtriq Dashboard > Settings > Integrations > AWS Shield
  Access Key ID: your-access-key-id
  Secret Access Key: your-secret-access-key
  Region: us-east-1

Flowtriq will verify your Shield Advanced subscription status during every detected DDoS incident.

Capabilities

Shield protection verification during attacks

Subscription Verification

During every detected DDoS incident, Flowtriq validates that your AWS Shield Advanced subscription is active. The status is checked in real time via the Shield API, so you know your AWS-level protection is in place when it matters.

Audit Logging

Shield Advanced status is logged with every incident record. This creates an audit trail showing that your DDoS protection was verified active during each attack, useful for compliance reporting and post-incident reviews.

Gap Detection

If Shield Advanced is not active during an attack, Flowtriq flags the incident with a warning. This catches protection gaps that might otherwise go unnoticed until after damage is done.

Layered Defense

Flowtriq adds detection, classification, and alerting on top of AWS Shield Advanced. Get attack family classification, traffic analytics, and multi-channel notifications that Shield Advanced alone does not provide.

Verify your AWS Shield protection during attacks

Add Flowtriq's detection and alerting on top of AWS Shield Advanced for complete DDoS visibility.

Start your free trial → Talk to us →

Read-only AWS access | Back to Integrations

FAQ

Frequently Asked Questions

How does Flowtriq integrate with AWS Shield?

When Flowtriq detects a DDoS attack targeting AWS-hosted infrastructure, it calls the AWS Shield API to verify your Shield Advanced subscription is active. The protection status is logged with the incident for compliance and audit purposes.

What AWS permissions are needed?

You need an IAM access key with the shield:GetSubscriptionState permission. This is a read-only permission that allows Flowtriq to check whether Shield Advanced is active. No write permissions to your AWS environment are required.

Does this require AWS Shield Advanced?

Yes. The integration verifies AWS Shield Advanced subscription status. AWS Shield Standard is included with all AWS accounts and does not have an API for subscription verification. Shield Advanced is a paid AWS service.

What happens if Shield Advanced is not active?

If Flowtriq detects an attack and the Shield Advanced subscription check returns inactive, the incident is flagged with a warning in your dashboard. This gives you visibility into protection gaps during active attacks.

Flowtriq + AWS ShieldAdvanced