AAD Overview

You can purchase an AAD instance and connect your services to the instance. The widely covering defense rules provided by AAD will protect your services from massive DDoS attacks.

Figure 1 shows the process of connecting services to AAD.

Figure 1 Connecting services to AAD

**Table 1** Procedures
No.	Procedure	Description
1	Using IAM to Grant AAD Permissions	Use Identity and Access Management (IAM) to grant fine-grained AAD permissions to users.
2	Purchasing an AAD Instance	Purchase an AAD instance based on service requirements.
3	Connecting Services to AAD	Connect the domain name or IP address to AAD.
4	Configuring a Protection Policy	AAD provides abundant and comprehensive protection rules. You can configure protection policies based on your service requirements.
5	Performing common security operations	Enabling Alarm Notifications for DDoS Attacks: After the alarm notification function is enabled, you will receive alarm notifications upon DDoS attacks. Enabling Logging: With LTS, you can perform real-time decision analysis, device O&M management, and service trend analysis in a timely and efficient manner. Viewing Statistics: You can view the DDoS attack defense report and CC attack defense report to learn about the network security status of your service. Managing Instances: You can view AAD instance information and modify instance specifications and configurations. Managing Domain Names: You can view the domain name information, modify the resolution line, and configure the domain name. Certificate Management: You can view certificate information, and update or delete certificates. Managing Forwarding Rules: You can view forwarding rules, modify origin server IP addresses, and export forwarding rules. Viewing Monitoring Metrics: You can view AAD metrics through Cloud Eye to learn about the AAD protection status and adjust protection policies in a timely manner. Querying Audit Logs: You can view historical operation records of AAD on CTS.