A burst of credential-stuffing attempts hits the citizen login API in front of API Gateway/CloudFront. Which edge control is commonly proposed?
Select an answer to reveal the explanation.
Short Explanation
When the login door gets shoulder-charged, put a rate gate at the edge—AWS WAF—before API Gateway or CloudFront spends cycles. Turning off logs or passwords-in-public-buckets helps the attacker, not the city.
Full Explanation
AWS WAF integrates with API Gateway and CloudFront to apply web ACL controls, including rate-based rules that mitigate credential stuffing and other high-volume abuse. Developers should recognize WAF as an edge control complementary to Cognito/auth logic. Disabling observability, removing authentication, or exposing password stores are incorrect responses.