AWS gameliftservers high security documentation change
Summary
Added new 'DDoS protection (player gateway) metrics' section with 7 new metrics for monitoring DDoS protection layer traffic and throttling
Security assessment
The change explicitly documents metrics related to DDoS attack detection (throttled packets/bytes) and protection mechanisms. The metrics track traffic filtering and rate limiting capabilities designed to mitigate DDoS attacks, indicating security-focused monitoring capabilities.
Diff
diff --git a/gameliftservers/latest/developerguide/monitoring-cloudwatch.md b/gameliftservers/latest/developerguide/monitoring-cloudwatch.md index 94dcaf2f3..02abc2044 100644 --- a//gameliftservers/latest/developerguide/monitoring-cloudwatch.md +++ b//gameliftservers/latest/developerguide/monitoring-cloudwatch.md @@ -5 +5 @@ -Metrics dimensionsFleet metricsQueue metricsFlexMatch metricsFleetIQ metrics +Metrics dimensionsFleet metricsDDoS protection (player gateway) metricsQueue metricsFlexMatch metricsFleetIQ metrics @@ -128,0 +129,14 @@ Metric | Description +## DDoS protection (player gateway) metrics + +Amazon GameLift Servers player gateway metrics track UDP traffic flowing through the DDoS protection layer when `PlayerGatewayMode` is set to `ENABLED` or `REQUIRED`. These metrics help you monitor traffic patterns, identify potential DDoS attacks, and track relay performance. + +Metric | Description +---|--- +`PlayerGatewayPacketsIn` | Number of UDP packets received from players and forwarded to game servers through the DDoS protection layer. Units: Count Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayBytesIn` | Number of bytes received from players and forwarded to game servers through the DDoS protection layer. Units: Bytes Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayPacketsOut` | Number of UDP packets received from game servers and forwarded to players through the DDoS protection layer. Units: Count Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayBytesOut` | Number of bytes received from game servers and forwarded to players through the DDoS protection layer. Units: Bytes Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayPacketsThrottled` | Number of inbound packets dropped due to rate limiting by the DDoS protection layer. Units: Count Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayBytesThrottled` | Number of inbound bytes dropped due to rate limiting by the DDoS protection layer. Units: Bytes Relevant CloudWatch statistics: Sum, Average, Minimum, Maximum Dimensions: FleetId, Location +`PlayerGatewayPlayerSessions` | Player sessions that are currently protected by the DDoS protection layer. Units: Count Relevant CloudWatch statistics: Average, Minimum, Maximum Dimensions: FleetId, Location +