This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Shield::ProactiveEngagement
<a name="aws-resource-shield-proactiveengagement"></a>

Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.

To enable proactive engagement, you must be subscribed to the [Business Support plan](https://aws.amazon.com/premiumsupport/business-support/) or the [Enterprise Support plan](https://aws.amazon.com/premiumsupport/enterprise-support/). 

 **Configure `AWS::Shield::ProactiveEngagement` for one account** 

To configure this resource through CloudFormation, you must be subscribed to AWS Shield Advanced. You can subscribe through the [Shield Advanced console](https://console.aws.amazon.com/wafv2/shieldv2#/) and through the APIs. For more information, see [Subscribe to AWS Shield Advanced](https://docs.aws.amazon.com/waf/latest/developerguide/enable-ddos-prem.html). 

See example templates for Shield Advanced in CloudFormation at [aws-samples/aws-shield-advanced-examples](https://github.com/aws-samples/aws-shield-advanced-examples). 

 **Configure Shield Advanced using AWS CloudFormation and AWS Firewall Manager** 

You might be able to use Firewall Manager with AWS CloudFormation to configure Shield Advanced across multiple accounts and protected resources. To do this, your accounts must be part of an organization in AWS Organizations. You can use Firewall Manager to configure Shield Advanced protections for any resource types except for Amazon Route 53 or AWS Global Accelerator. 

For an example of this, see the one-click configuration guidance published by the AWS technical community at [One-click deployment of Shield Advanced](https://youtu.be/LCA3FwMk_QE). 

## Syntax
<a name="aws-resource-shield-proactiveengagement-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-shield-proactiveengagement-syntax.json"></a>

```
{
  "Type" : "AWS::Shield::ProactiveEngagement",
  "Properties" : {
      "[EmergencyContactList](#cfn-shield-proactiveengagement-emergencycontactlist)" : [ EmergencyContact, ... ],
      "[ProactiveEngagementStatus](#cfn-shield-proactiveengagement-proactiveengagementstatus)" : String
    }
}
```

### YAML
<a name="aws-resource-shield-proactiveengagement-syntax.yaml"></a>

```
Type: AWS::Shield::ProactiveEngagement
Properties:
  [EmergencyContactList](#cfn-shield-proactiveengagement-emergencycontactlist): 
    - EmergencyContact
  [ProactiveEngagementStatus](#cfn-shield-proactiveengagement-proactiveengagementstatus): String
```

## Properties
<a name="aws-resource-shield-proactiveengagement-properties"></a>

`EmergencyContactList`  <a name="cfn-shield-proactiveengagement-emergencycontactlist"></a>
The list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support, plus any relevant notes.   
To enable proactive engagement, the contact list must include at least one phone number.  
If you provide more than one contact, in the notes, indicate the circumstances under which each contact should be used. Include primary and secondary contact designations, and provide the hours of availability and time zones for each contact.  
Example contact notes:  
+ This is a hotline that's staffed 24x7x365. Please work with the responding analyst and they will get the appropriate person on the call.
+ Please contact the secondary phone number if the hotline doesn't respond within 5 minutes.
*Required*: Yes  
*Type*: Array of [EmergencyContact](aws-properties-shield-proactiveengagement-emergencycontact.md)  
*Minimum*: `1`  
*Maximum*: `10`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ProactiveEngagementStatus`  <a name="cfn-shield-proactiveengagement-proactiveengagementstatus"></a>
Specifies whether proactive engagement is enabled or disabled.   
Valid values:   
`ENABLED` - The Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.  
`DISABLED` - The SRT will not proactively notify contacts about escalations or to initiate proactive customer support.   
*Required*: Yes  
*Type*: String  
*Allowed values*: `ENABLED | DISABLED`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-shield-proactiveengagement-return-values"></a>

### Ref
<a name="aws-resource-shield-proactiveengagement-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the ID of the account that submitted the template. 

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-shield-proactiveengagement-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-shield-proactiveengagement-return-values-fn--getatt-fn--getatt"></a>

`AccountId`  <a name="AccountId-fn::getatt"></a>
The ID of the account that submitted the template.

## Examples
<a name="aws-resource-shield-proactiveengagement--examples"></a>



### Enable proactive engagement and define contacts
<a name="aws-resource-shield-proactiveengagement--examples--Enable_proactive_engagement_and_define_contacts"></a>

The following shows an example proactive engagement configuration with proactive engagement enabled and with two emergency contacts. 

#### YAML
<a name="aws-resource-shield-proactiveengagement--examples--Enable_proactive_engagement_and_define_contacts--yaml"></a>

```
Resources:
  TestProactiveEngagement:
    DeletionPolicy: Delete
    Type: AWS::Shield::ProactiveEngagement
    Properties:
      ProactiveEngagementStatus: ENABLED
      EmergencyContactList:
        - EmailAddress: !Sub 'dev-on-duty@example.com'
          ContactNotes: !Sub 'Dev On Duty'
          PhoneNumber: '+10000000001'
        - EmailAddress: !Sub 'security@example.com'
          ContactNotes: !Sub 'Security Team'
          PhoneNumber: '+10000000002'
```

#### JSON
<a name="aws-resource-shield-proactiveengagement--examples--Enable_proactive_engagement_and_define_contacts--json"></a>

```
{
    "Resources": {
        "TestProactiveEngagement": {
            "DeletionPolicy": "Delete",
            "Type": "AWS::Shield::ProactiveEngagement",
            "Properties": {
                "ProactiveEngagementStatus": "ENABLED",
                "EmergencyContactList": [
                    {
                        "EmailAddress": {
                            "Fn::Sub": "dev-on-duty@example.com"
                        },
                        "ContactNotes": {
                            "Fn::Sub": "Dev On Duty"
                        },
                        "PhoneNumber": "+10000000001"
                    },
                    {
                        "EmailAddress": {
                            "Fn::Sub": "security@example.com"
                        },
                        "ContactNotes": {
                            "Fn::Sub": "Security Team"
                        },
                        "PhoneNumber": "+10000000002"
                    }
                ]
            }
        }
    }
}
```

# AWS::Shield::ProactiveEngagement EmergencyContact
<a name="aws-properties-shield-proactiveengagement-emergencycontact"></a>

Contact information that the SRT can use to contact you if you have proactive engagement enabled, for escalations to the SRT and to initiate proactive customer support.

## Syntax
<a name="aws-properties-shield-proactiveengagement-emergencycontact-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-shield-proactiveengagement-emergencycontact-syntax.json"></a>

```
{
  "[ContactNotes](#cfn-shield-proactiveengagement-emergencycontact-contactnotes)" : String,
  "[EmailAddress](#cfn-shield-proactiveengagement-emergencycontact-emailaddress)" : String,
  "[PhoneNumber](#cfn-shield-proactiveengagement-emergencycontact-phonenumber)" : String
}
```

### YAML
<a name="aws-properties-shield-proactiveengagement-emergencycontact-syntax.yaml"></a>

```
  [ContactNotes](#cfn-shield-proactiveengagement-emergencycontact-contactnotes): String
  [EmailAddress](#cfn-shield-proactiveengagement-emergencycontact-emailaddress): String
  [PhoneNumber](#cfn-shield-proactiveengagement-emergencycontact-phonenumber): String
```

## Properties
<a name="aws-properties-shield-proactiveengagement-emergencycontact-properties"></a>

`ContactNotes`  <a name="cfn-shield-proactiveengagement-emergencycontact-contactnotes"></a>
Additional notes regarding the contact.   
*Required*: No  
*Type*: String  
*Pattern*: `^[\w\s\.\-,:/()+@]*$`  
*Minimum*: `1`  
*Maximum*: `1024`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`EmailAddress`  <a name="cfn-shield-proactiveengagement-emergencycontact-emailaddress"></a>
The email address for the contact.  
*Required*: Yes  
*Type*: String  
*Pattern*: `^\S+@\S+\.\S+$`  
*Minimum*: `1`  
*Maximum*: `150`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`PhoneNumber`  <a name="cfn-shield-proactiveengagement-emergencycontact-phonenumber"></a>
The phone number for the contact.  
*Required*: No  
*Type*: String  
*Pattern*: `^\+[1-9]\d{1,14}$`  
*Minimum*: `1`  
*Maximum*: `16`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)