# AWS Shield API

> AWS Shield API on Apizie: 35 endpoints (Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such…, Authorizes the Shield Response Team (SRT) using the specified role, to access your Amazon Web Services…, Adds health-based detection to the Shield Advanced protection for a resource. Shield Advanced health-based…, Initializes proactive engagement and sets the list of contacts for the Shield Response Team (SRT) to use.…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-shield/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-shield`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-shield
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-shield/openapi.json

Shield Advanced This is the Shield Advanced API Reference . This guide is for developers who need detailed information about the Shield Advanced API actions, data types, and errors. For detailed information about WAF…

## Endpoints

### Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/associate-drtlog-bucket` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Authorizes the Shield Response Team (SRT) using the specified role, to access your Amazon Web Services…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/associate-drtrole` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Adds health-based detection to the Shield Advanced protection for a resource. Shield Advanced health-based…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/associate-health-check` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Initializes proactive engagement and sets the list of contacts for the Shield Response Team (SRT) to use.…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/associate-proactive-engagement-details` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Enables Shield Advanced for a specific Amazon Web Services resource. The resource can be an Amazon…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/create-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a grouping of protected resources so they can be handled as a collective. This resource grouping…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/create-protection-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Activates Shield Advanced for an account. For accounts that are members of an Organizations organization,…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/create-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes an Shield Advanced Protection .
`POST https://apizie.tech/v1/cloud:amazonaws-shield/delete-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the specified protection group.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/delete-protection-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Describes the details of a DDoS attack.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-attack` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Provides information about the number and type of attacks Shield has detected in the last year for all…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-attack-statistics` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the current role and list of Amazon S3 log buckets used by the Shield Response Team (SRT) to access…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-drtaccess` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you if…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-emergency-contact-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Lists the details of a Protection object.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-protection` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the specification for the specified protection group.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-protection-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Provides details about the Shield Advanced subscription for an account.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/describe-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Disable the Shield Advanced automatic application layer DDoS mitigation feature for the protected resource.…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/disable-application-layer-automatic-response` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes authorization from the Shield Response Team (SRT) to notify contacts about escalations to the SRT…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/disable-proactive-engagement` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the Shield Response Team's (SRT) access to the specified Amazon S3 bucket containing the logs that…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/disassociate-drtlog-bucket` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes the Shield Response Team's (SRT) access to your Amazon Web Services account.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/disassociate-drtrole` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes health-based detection from the Shield Advanced protection for a resource. Shield Advanced…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/disassociate-health-check` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Enable the Shield Advanced automatic application layer DDoS mitigation for the protected resource. This…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/enable-application-layer-automatic-response` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/enable-proactive-engagement` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns the SubscriptionState , either Active or Inactive .
`POST https://apizie.tech/v1/cloud:amazonaws-shield/get-subscription-state` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Returns all ongoing DDoS attacks or all DDoS attacks during a specified time period.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/list-attacks` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves ProtectionGroup objects for the account. You can retrieve all protection groups or you can provide…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/list-protection-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves Protection objects for the account. You can retrieve all protections or you can provide filtering…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/list-protections` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Retrieves the resources that are included in the protection group.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/list-resources-in-protection-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Gets information about Amazon Web Services tags for a specified Amazon Resource Name (ARN) in Shield.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Adds or updates tags for a resource in Shield.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Removes tags from a resource in Shield.
`POST https://apizie.tech/v1/cloud:amazonaws-shield/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates an existing Shield Advanced automatic application layer DDoS mitigation configuration for the…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/update-application-layer-automatic-response` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the details of the list of email addresses and phone numbers that the Shield Response Team (SRT) can…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/update-emergency-contact-settings` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates an existing protection group. A protection group is a grouping of protected resources so they can be…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/update-protection-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Updates the details of an existing subscription. Only enter values for parameters you want to change. Empty…
`POST https://apizie.tech/v1/cloud:amazonaws-shield/update-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-shield/associate-drtlog-bucket" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Shield API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-shield/associate-drtlog-bucket with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Shield API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Shield itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Shield API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-shield.

### What is the status of the AWS Shield API?
Needs your own provider key (bring your own key)