← Back

Wire · regulatory

AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027

Published

28 July 2026

Topic

regulatory

Sectors

Cloud InfrastructureCybersecurity

Geography

United States

Source

Read at helpnetsecurity.com

Verified

Fusion42 · 28 July 2026 · Fusion42 review

AWS is retiring Shield Advanced Layer 7 automatic mitigation on 1 January 2027, replacing it with a new Anti-DDoS managed rule group in AWS WAF. Customers must migrate their protection rules by the deadline or lose application-layer DDoS defence.

This Wire brief sits within Fusion42's coverage of Cloud Infrastructure and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.

◆ The Wire takeaway

Your DDoS protection stops working on 1 January 2027 unless you migrate to AWS WAF's Anti-DDoS rule group by then. The good news: it costs less to run (50 WCUs instead of 150), requires immediate infrastructure-as-code updates, and you've got five months to test it in Count mode before the automatic cutover forces your hand.

Related on Wire

Topics

Cloud InfrastructureCybersecurityaws-shieldddos-protectionmanaged-rule-groupinfrastructure-as-codemigration-deadline