Which service provides detailed attack diagnostics and mitigation strategies for DDoS attacks?

AWS Shield Advanced is a managed Distributed Denial of Service (DDoS) protection service that provides enhanced security for applications running on AWS. It offers detailed attack diagnostics, empowers users with real-time visibility into ongoing DDoS attacks, and provides tailored mitigation strategies to minimize service disruption.

One of the key features of AWS Shield Advanced is its ability to give users access to attack metrics and insights through the AWS Console and integration with AWS CloudWatch metrics. This allows organizations to understand the nature and impact of the attack, helping them to respond effectively. Additionally, Shield Advanced includes DDoS cost protection, which can be crucial for businesses aimed at ensuring their services remain operational during an attack.

While other services like AWS KMS (Key Management Service) and AWS Security Hub do play vital roles in security management and compliance, they do not specifically focus on DDoS attacks. Tokenization, on the other hand, is a method for securing sensitive data but does not offer DDoS mitigation capabilities. Therefore, AWS Shield Advanced is the dedicated service for providing the necessary protection and insight related to DDoS attacks.