A city public-works portal is hit with malicious HTTP patterns such as injection-style requests. Shield is already discussed for DDoS, but which service should filter those web-layer attacks with customizable HTTP rules?
Select an answer to reveal the explanation.
Short Explanation
Picture a bouncer who reads the actual HTTP request—not just the crowd size at the door. Shield helps when traffic volume is the attack; WAF is the one that inspects and blocks nasty web requests with rules you define.
Full Explanation
AWS WAF protects web applications by allowing or blocking HTTP and HTTPS requests based on rules in a web ACL. AWS Shield focuses on DDoS protection and complements WAF rather than replacing HTTP content filtering. GuardDuty analyzes account and network telemetry for threats, and AWS Config evaluates resource configuration compliance. For malicious HTTP patterns against a public portal, WAF is the service that applies web request filters.