Are malicious parties spamming your SMS application on AWS?

Are malicious parties spamming your SMS application on AWS?

Malicious parties love to DDoS anything and everything they can send data to, and SMS based endpoints are no exception.

There is an attack known as SMS Pumping or Artificially Inflated Traffic(AIT) that blasts your SMS endpoints in an effort to drive costs up for you.

They also do the math and ping you via countries with higher per-message prices for SMS.

Beyond just cost, this can hurt your SMS reputation score, which is more likely to get your messages marked as spam automatically.

The good news is that AWS has AWS End User Messaging Protect, which can help you filter out the malicious traffic, saving you money and your reputation.

Think of it like AWS Web Application Firewall, but for SMS traffic instead of HTTP.

If you want to sharpen your AWS information security skills, you should check out my On Demand Video Course on O'Reilly - Zero to Hero on AWS Security: An Animated Guide to Security in the Cloud.