How to protect AWS Amplify subdomains using AWS Shield

Question

Amplify subdomains are not showing up in the list of Shield resources to protect. I have Angular based front-end deployed with AWS Amplify. Since DNS entries are not displayed in Route 53, I was wondering how to protect those endpoints using Shield Advanced.

Answer

I had to create a new cloudfront distribution manually and then add it as a protected resource in Shield. This also means updating the CNAME in Route 53 for the Amplify subdomain to point to new cloudfront name instead of the Amplify generated one.

How to protect AWS Amplify subdomains using AWS Shield

Conteúdo relevante