Question

A media company runs a public-facing web application behind an Application Load Balancer that is registered as a protected resource in AWS Shield Advanced. During a large volume DDoS event, Auto Scaling launched many additional EC2 instances and the ALB processed a spike in load, resulting in significantly higher AWS charges for that billing period. The networking team wants to recover these unexpected costs that were directly caused by the attack. Which capability of Shield Advanced addresses this requirement?

Accepted Answer

Submit a cost protection (scaling reimbursement) request to AWS for charges incurred as a direct result of the DDoS attack on protected resources.

Answer

Enable AWS WAF rate-based rules so that Shield automatically credits the account for any blocked requests during the attack window.

Answer

Configure a proactive engagement with the Shield Response Team (SRT), which automatically issues billing credits for scaling activity.

Answer

Rely on AWS Budgets anomaly detection, which refunds charges that exceed the configured DDoS spending threshold.