Route 53 query pricing

Question

A customer is asking if they would be charged for queries for a record that does not exists in their authoritative domain.  e.g. if they are authoritative for example.com and someone queries for dummy.example.com which doesn't exist, are they charged?  I am guessing so but I cannot seem to find this information to make sure I am correct.

If the are charged - I know they will ask me how they can prevent someone querying them millions of times for which they would be billed, will Shield Standard protect them from such attacks?

Thanks in advance.

Accepted Answer

The Shield DDoS mitigation systems that protect Amazon Route 53 will rate-limit suspicious queries, preventing them from being served. The customer is responsible for paying for any queries that are not blocked by this system.

The customer may subscribe to AWS Shield Advanced for the Cost Protection feature. If an AWS Shield Advanced customer protects a Route 53 hosted zone and is targeted by an attack that increases their Route 53 utilization, they can request a limited refund of those costs.

See: https://docs.aws.amazon.com/waf/latest/developerguide/request-refund.html for more details.

Route 53 query pricing

Contenido relevante