A city clerk launches a public citizen portal that must stay available during traffic floods and volumetric attacks. At foundational identify depth, which AWS service is purpose-built for DDoS protection of such internet-facing workloads?
Select an answer to reveal the explanation.
Short Explanation
Think of Shield like a storm berm in front of a public beach parking lot — it is there when a flood of unwanted traffic tries to knock the citizen portal offline. Config and Artifact help with compliance paperwork and settings, not packet floods. Audit Manager gathers evidence; it does not soak up DDoS traffic.
Full Explanation
AWS Shield provides managed distributed denial-of-service (DDoS) protection for applications running on AWS, with Shield Standard included for many internet-facing services and Shield Advanced available for higher levels of protection and response. AWS Config records and evaluates resource configurations, Audit Manager helps collect audit evidence, and Artifact delivers compliance reports — none of those services is the foundational DDoS protection service.