WAF is an AWS service, while Site Shield is an Akamai service. WAF filters malicious web traffic, whereas Site Shield removes apps from the public IP address space, therefore reducing the attack surface.