Ravi Sir's Cards › AWS
DDoS-resilient edge
This revision card explains DDoS-resilient edge. It starts from the need that one control is a single point of failure. It describes R53 , then CF+WAF+Shield , then ALB/ASG; FMS baseline; runbooks A/B/C. The how-to section notes draw ARNs , then attach edge WAF , then protect with Shield , then write runbooks. An example on the card is ananya Iyer ships CRM edge with MaxSize caps and status failover.
Read card text
What this card says
Why do we need it?
One control is a single point of failure.
What is it?
R53 → CF+WAF+Shield → ALB/ASG; FMS baseline; runbooks A/B/C.
architecture
How to do it
Draw ARNs → attach edge WAF → protect with Shield → write runbooks.
Example
Ananya Iyer ships CRM edge with MaxSize caps and status failover.