[jerryoftheyear]

There are two levels of AWS Shield, "Standard" and "Advanced". You are correct that all instances receive "Standard" protection from Shield by default.

https://aws.amazon.com/shield/