**To enable AWS Shield Advanced protection for a single AWS resource** The following ``create-protection`` example enables Shield Advanced protection for the specified AWS CloudFront distribution. :: aws shield create-protection \ --name "Protection for CloudFront distribution" \ --resource-arn arn:aws:cloudfront::123456789012:distribution/E198WC25FXOWY8 Output:: { "ProtectionId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111" } For more information, see `Specify Your Resources to Protect <https://docs.aws.amazon.com/waf/latest/developerguide/ddos-choose-resources.html>`__ in the *AWS Shield Advanced Developer Guide*.