fakecloud_shield/lib.rs
1//! AWS Shield / Shield Advanced (`shield`) awsJson1_1 service for fakecloud.
2//!
3//! Full control plane for AWS Shield Advanced: protections and protection
4//! groups over supported resource types (CloudFront distributions, Route 53
5//! hosted zones, Elastic IPs, Classic/Application load balancers, Global
6//! Accelerator), the annual auto-renewing Shield Advanced subscription and its
7//! subscription-state / limits, emergency-contact settings, DDoS Response Team
8//! (DRT) access (role + log buckets), proactive engagement, application-layer
9//! automatic response, health-check association, and resource tagging -- all
10//! model-driven-validated, account-partitioned and persisted (snapshot +
11//! restore).
12//!
13//! Attack surfacing is honest: with no real DDoS traffic to observe,
14//! `ListAttacks` returns an empty attack list and `DescribeAttackStatistics`
15//! returns a zeroed time-series over the requested window. No synthetic attacks
16//! are fabricated. Every other operation is real, persisted CRUD -- no stubbed
17//! success responses.
18
19pub mod persistence;
20pub(crate) mod service;
21pub(crate) mod state;
22pub(crate) mod validate;
23
24pub use service::ShieldService;
25pub use state::{SharedShieldState, ShieldSnapshot, ShieldState, SHIELD_SNAPSHOT_SCHEMA_VERSION};