跳至主要内容

AWS Shield 和 AWS WAF 有什么区别？

并排比较 AWS Shield 和 AWS WAF — 功能、定价和理想使用场景，以帮助您选择正确的产品。

并排比较

比较
AWS Shield
AWS WAF
类别

安全、网络/应用程序保护

安全、网络/应用程序保护
说明

适用于 Web 应用程序的托管式 DDoS 保护

Web 应用程序防火墙，可保护您的 Web 应用程序免遭常见网络利用攻击。
最适用于
  • DDoS 保护
  • 应用程序可用性
  • 成本保护
  • 攻击可见性
  • 机器人控制功能
  • SQL 注入保护
  • XSS 保护
  • 速率限制
  • IP 信誉
主要功能
  • 不间断检测
  • 自动缓解
  • DDoS 响应小组
  • 成本保护
  • 实时可见性
  • 托管规则
  • 自定义规则
  • 机器人控制功能
  • 账户盗用预防
  • 欺诈控制
定价模式

标准版：免费；高级版：3000 美元/月

按 Web ACL + 规则 + 请求付费
免费套餐

是

否
专家点评

“Shield Standard 是自动免费的；它可以处理大多数网络层 DDoS。Shield Advanced 增加了 DDoS 响应小组、成本保护（AWS 以积分抵扣 DDoS 引发的扩展成本）和应用程序层可见性。对于面向互联网的生产工作负载来说，这是值得的，因为停机会对收入产生实际影响。”
— Didier Durand，re:Post 顶级贡献者 [个人资料]

“从核心规则集和已知恶意输入的 AWS 托管规则开始；它们无需自定义逻辑即可覆盖 OWASP 前 10 个。在应用层为 DDoS 添加基于速率的规则，并使用机器人控制功能来屏蔽抓取程序和凭证填充器。切换到 Block 模式之前，请务必先在 Count 模式下部署。”
— Oleksii Bebych, re:Post 顶级贡献者 [个人资料]
产品页面

了解有关 AWS Shield 的更多信息 »

了解有关 AWS WAF 的更多信息 »

何时使用 AWS Shield 或 AWS WAF

在以下情况下使用 AWS Shield：

  • DDoS 保护
  • 应用程序可用性
  • 成本保护
  • 攻击可见性

了解有关 AWS Shield 的更多信息 »

在以下情况下使用 AWS WAF：

  • 机器人控制功能
  • SQL 注入保护
  • XSS 保护
  • 速率限制
  • IP 信誉

了解有关 AWS WAF 的更多信息 »

AWS product comparisons

Read about AWS products side-by-side

显示 1 - 8 (21)
2026-07-30

What's the difference between Amazon Aurora and Amazon Neptune?

Both are purpose-built, fully managed AWS databases, but they solve fundamentally different problems. Aurora handles structured relational data with SQL; Neptune handles highly connected data where relationships between entities are the primary query pattern.
Learn more
2026-07-30

What's the difference between Amazon RDS and Amazon Redshift?

Both run SQL queries, but they're optimized for fundamentally different workloads. RDS handles transactional operations (inserts, updates, lookups) for your application. Redshift handles analytical queries (aggregations, scans, joins across billions of rows) for your data team.
Learn more
2026-07-30

What's the difference between Amazon Aurora and Amazon DynamoDB?

Both are fully managed AWS database services, but they serve fundamentally different data models and access patterns. Aurora is a relational database for structured data with relationships; DynamoDB is a NoSQL key-value store built for single-digit millisecond performance at any scale.
Learn more
2026-07-30

What's the difference between Amazon DocumentDB and Amazon Neptune?

Both handle semi-structured data, but they're optimized for different query patterns. DocumentDB stores and queries JSON documents; Neptune stores and traverses relationships between entities.
Learn more
2026-07-30

What are the differences between Amazon DynamoDB and Amazon DocumentDB?

Both are fully managed NoSQL databases on AWS, but they serve different data models. DynamoDB is a key-value store optimized for known access patterns at massive scale; DocumentDB is a document database for flexible JSON schemas with MongoDB compatibility.
Learn more
2026-07-30

What's the difference between Amazon DynamoDB and Amazon Keyspaces?

Both are fully managed, serverless-capable NoSQL databases on AWS. DynamoDB is AWS-native with its own API and data model; Keyspaces is Apache Cassandra-compatible, letting you use existing Cassandra drivers, tools, and expertise.
Learn more
2026-07-30

What's the difference between Amazon ElastiCache and Amazon MemoryDB?

Both are Redis-compatible, fully managed in-memory services on AWS. ElastiCache is designed as a caching layer in front of another database; MemoryDB is designed as a primary database that combines in-memory speed with Multi-AZ durability.
Learn more
2026-07-30

What's the difference between Amazon Aurora and Amazon RDS?

Both are fully managed relational database services on AWS, but Aurora is a cloud-native engine built for higher performance and availability, while RDS gives you familiar open-source and commercial engines with less operational overhead than self-managed.
Learn more

Did you find what you were looking for today?

Let us know so we can improve the quality of the content on our pages