Table: aws_shield_attack_statistic - Query AWS Shield Attack Statistics using SQL

AWS Shield is a DDoS protection service from AWS. AWS Shield provide statistics about the number and type of attacks Shield has detected in the last year for all resources that belong to your account. These statistics are available to you regardless of whether you have subscribed to Shield Advanced or not.

Table Usage Guide

The aws_shield_attack_statistic table in Steampipe allows you to query AWS Shield Attack Statistics and information about layer 3, 4 and 7 attacks that Shield has detected in the last year. It gives you an overview which kind of attacks have the most impact on your resources and how many attacks Shield was able to detect. For more information about the individual columns and their values, please refer to the official AWS documentation.

Examples

Basic info

select
  max,
  unit,
  attack_count
from
  aws_shield_attack_statistic
order by
  attack_count desc;

select
  max,
  unit,
  attack_count
from
  aws_shield_attack_statistic
order by
  attack_count desc;

Schema for aws_shield_attack_statistic

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
attack_count	bigint		The number of attacks detected during the time period. This is always present, but might be zero.
end_time	timestamp with time zone		The end time of the observation time range (should be always the current date).
max	double precision		The maximum attack volume observed in the observation time range for the given unit.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text		The AWS Region in which the resource is located.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
start_time	timestamp with time zone		The start time of observation time range (should be always one year ago).
unit	text		Unit of the attack statistic.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_shield_attack_statistic