---
type: resource-type
title: Protection
description: aws resource type AWS::Shield::Protection
name: Protection
lexicon: aws
resource_type: AWS::Shield::Protection
---
`AWS::Shield::Protection`, a resource type of the aws lexicon.

## Properties

- `Name` (`string`, required): Friendly name for the Protection.
- `ResourceArn` (`string`, required): The ARN (Amazon Resource Name) of the resource to be protected.
- `ApplicationLayerAutomaticResponseConfiguration` (`Protection_ApplicationLayerAutomaticResponseConfiguration`, optional)
- `HealthCheckArns` (`string[]`, optional): The Amazon Resource Names (ARNs) of the health check to associate with the protection.
- `ProtectionArn` (`string`, optional): The ARN (Amazon Resource Name) of the protection.
- `ProtectionId` (`string`, optional): The unique identifier (ID) of the protection.
- `Tags` (`Protection_Tag[]`, optional): One or more tag key-value pairs for the Protection object.

## Attributes

- `ProtectionArn`
- `ProtectionId`

## Governed by

- [WAW040](/rules/WAW040.md): RDS instance or cluster does not have DeletionProtection enabled (full tier)