Does Amazon Beanstalk automatically prevent (distribute) a denial of service attack? If not, which one is most convenient?
No, this will not prevent DoS attacks, you will have to detect and prevent such attacks yourself. There are various ways to protect your application from DoS attacks, you can use it for Google. Here are some links that may help you:
I believe that he
New - AWS Shield AWS Shield is a new managed service that protects your web applications against a DDoS (distributed denial of service) attack. It works in conjunction with elastic load balancing, Amazon CloudFront and Amazon Route 53 and protects you from DDoS attacks of many types, shapes and sizes. There are two levels of service:AWS Shield Standard is available to all AWS customers at no additional cost. It protects you from 96% of the most common attacks today, including SYN / ACK floods, reflection attacks, and slow HTTP reads. This protection is applied automatically and transparently to Elastic balancing loads, CloudFront distribution and Route 53 resources.AWS Shield Advanced provides additional DDoS protection for bulk attacks, intelligent attack detection, and mitigation of attacks at the application and network level. You get 24 × 7 access to our DDoS Response Team (DRT) for user mitigation during attacks, advanced real-time metrics and reports, and cost protection for DDoS to protect against banknote surges after a DDoS attack.https://aws.amazon.com/blogs/aws/aws-shield-protect-your-applications-from-ddos-attacks/
New - AWS Shield AWS Shield is a new managed service that protects your web applications against a DDoS (distributed denial of service) attack. It works in conjunction with elastic load balancing, Amazon CloudFront and Amazon Route 53 and protects you from DDoS attacks of many types, shapes and sizes. There are two levels of service:
AWS Shield Standard is available to all AWS customers at no additional cost. It protects you from 96% of the most common attacks today, including SYN / ACK floods, reflection attacks, and slow HTTP reads. This protection is applied automatically and transparently to Elastic balancing loads, CloudFront distribution and Route 53 resources.
AWS Shield Advanced provides additional DDoS protection for bulk attacks, intelligent attack detection, and mitigation of attacks at the application and network level. You get 24 × 7 access to our DDoS Response Team (DRT) for user mitigation during attacks, advanced real-time metrics and reports, and cost protection for DDoS to protect against banknote surges after a DDoS attack.
https://aws.amazon.com/blogs/aws/aws-shield-protect-your-applications-from-ddos-attacks/
There are several types of doss. Since your ec2 IP address is behind aws-eb, I think your ec2 instance is at least safe from ddos layer3 / 4.