← Back

Wire · regulatory

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027

Published

28 July 2026

Topic

regulatory

Sectors

Cloud InfrastructureCybersecurity

Geography

United States

Source

Read at helpnetsecurity.com

Verified

Fusion42 · 28 July 2026 · Fusion42 review

AWS is retiring Shield Advanced Layer 7 automatic mitigation on 1 January 2027, replacing it with a new Anti-DDoS managed rule group in AWS WAF. Customers must migrate their protection rules by the deadline or lose application-layer DDoS defence.

This Wire brief sits within Fusion42's coverage of Cloud Infrastructure and Cybersecurity.

◆ The Wire takeaway

Your DDoS protection stops working on 1 January 2027 unless you migrate to AWS WAF's Anti-DDoS rule group by then. The good news: it costs less to run (50 WCUs instead of 150), requires immediate infrastructure-as-code updates, and you've got five months to test it in Count mode before the automatic cutover forces your hand.

Coverage

1 source · 28 Jul 2026

Related on Wire

Topics

Cloud InfrastructureCybersecurityaws-shieldddos-protectionmanaged-rule-groupinfrastructure-as-codemigration-deadline