...
AWS shield standard is enabled to protect the application and the API’s from DDoS attacks these attacks violate the CIA triad which is Confidentiality, integrity and the availability,, AWS shield is a managed Distributed Denial of Service protection service that always protects AWS-hosted applications from DDoS attacks.
Monitoring and logging
AWS CloudWatch collects monitoring and operational data in the form of logs, metrics, and events, and visualizes it using automated dashboards to get a unified view of AWS resources, applications, and services that run on AWS and these event logs have a retention period of 3 months
...