Amazon Shield Shield Application Layer Automatic Response API

The Shield Application Layer Automatic Response API from Amazon Shield — 3 operation(s) for shield application layer automatic response.

Business capability
Threat Detection & Response Management BC-620.30

Operations 3

POST /#DisableApplicationLayerAutomaticResponse Disable Application Layer Automatic Response #
POST /#EnableApplicationLayerAutomaticResponse Enable Application Layer Automatic Response #
POST /#UpdateApplicationLayerAutomaticResponse Update Application Layer Automatic Response #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/amazon-shield:amazon-shield-application-layer-automatic-response-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-shield-application-layer-automatic-response-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: AWS Shield Application Layer Automatic Response API
  version: '2016-06-02'
  description: Generated from AWS's published Smithy model for AWS Shield. 3 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://shield.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Application Layer Automatic Response
paths:
  /#DisableApplicationLayerAutomaticResponse:
    post:
      operationId: DisableApplicationLayerAutomaticResponse
      summary: Disable Application Layer Automatic Response
      description: Disable the Shield Advanced automatic application layer DDoS mitigation feature for the protected resource. This stops Shield Advanced from creating, verifying, and applying WAF rules for attacks that it detects for the resource.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/DisableApplicationLayerAutomaticResponseResponse'
        '500':
          description: InternalErrorException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InternalErrorException'
        '400':
          description: InvalidOperationException; InvalidParameterException; OptimisticLockException; ResourceNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidOperationException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSShield_20160616.DisableApplicationLayerAutomaticResponse
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/DisableApplicationLayerAutomaticResponseRequest'
      tags:
      - Application Layer Automatic Response
  /#EnableApplicationLayerAutomaticResponse:
    post:
      operationId: EnableApplicationLayerAutomaticResponse
      summary: Enable Application Layer Automatic Response
      description: Enable the Shield Advanced automatic application layer DDoS mitigation for the protected resource. This feature is available for Amazon CloudFront distributions and Application Load Balancers only. This causes Shield Advanced to create, verify, and apply WAF rules for DDoS attacks that it detects for the resource. Shield Advanced applies the rules in a Shield rule group inside the web ACL that you've associated with the resource. For information about how automatic mitigation works and the requirements for using it, see Shield Advanced automatic application layer DDoS mitigation. Don't use this action to make changes to automatic mitigation settings when it's already enabled for a resource. Instead, use UpdateApplicationLayerAutomaticResponse. To use this feature, you must associate a web ACL with the protected resource. The web ACL must be created using the latest version of WAF (v2). You can associate the web ACL through the Shield Advanced console at https://console.aws.amazon.com/wafv2/shieldv2#/. For more information, see Getting Started with Shield Advanced. You can also associate the web ACL to the resource through the WAF console or the WAF API, but you must manage Shield A
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/EnableApplicationLayerAutomaticResponseResponse'
        '500':
          description: InternalErrorException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InternalErrorException'
        '400':
          description: InvalidOperationException; InvalidParameterException; LimitsExceededException; OptimisticLockException; ResourceNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidOperationException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSShield_20160616.EnableApplicationLayerAutomaticResponse
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/EnableApplicationLayerAutomaticResponseRequest'
      tags:
      - Application Layer Automatic Response
  /#UpdateApplicationLayerAutomaticResponse:
    post:
      operationId: UpdateApplicationLayerAutomaticResponse
      summary: Update Application Layer Automatic Response
      description: Updates an existing Shield Advanced automatic application layer DDoS mitigation configuration for the specified resource.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/UpdateApplicationLayerAutomaticResponseResponse'
        '500':
          description: InternalErrorException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InternalErrorException'
        '400':
          description: InvalidOperationException; InvalidParameterException; OptimisticLockException; ResourceNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidOperationException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSShield_20160616.UpdateApplicationLayerAutomaticResponse
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/UpdateApplicationLayerAutomaticResponseRequest'
      tags:
      - Application Layer Automatic Response
components:
  schemas:
    InvalidOperationException:
      type: object
      properties:
        message:
          type: string
    DisableApplicationLayerAutomaticResponseResponse:
      type: object
      properties: {}
    InternalErrorException:
      type: object
      properties:
        message:
          type: string
    UpdateApplicationLayerAutomaticResponseRequest:
      type: object
      properties:
        ResourceArn:
          type: string
          description: The ARN (Amazon Resource Name) of the resource.
        Action:
          $ref: '#/components/schemas/ResponseAction'
      required:
      - ResourceArn
      - Action
    EnableApplicationLayerAutomaticResponseResponse:
      type: object
      properties: {}
    EnableApplicationLayerAutomaticResponseRequest:
      type: object
      properties:
        ResourceArn:
          type: string
          description: The ARN (Amazon Resource Name) of the protected resource.
        Action:
          $ref: '#/components/schemas/ResponseAction'
      required:
      - ResourceArn
      - Action
    CountAction:
      type: object
      properties: {}
    ResponseAction:
      type: object
      properties:
        Block:
          $ref: '#/components/schemas/BlockAction'
        Count:
          $ref: '#/components/schemas/CountAction'
    UpdateApplicationLayerAutomaticResponseResponse:
      type: object
      properties: {}
    DisableApplicationLayerAutomaticResponseRequest:
      type: object
      properties:
        ResourceArn:
          type: string
          description: The ARN (Amazon Resource Name) of the protected resource.
      required:
      - ResourceArn
    BlockAction:
      type: object
      properties: {}
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: shield
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/shield/service/2016-06-02/shield-2016-06-02.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)