A company wants to have an Intrusion detection system available for their VPC in AWS. They want to have complete control over the system. Which of the following would be ideal for implementing?

Answer options:

A.Use AWS WAF to detect & prevent intrusions occurring in the VPC.B.Use a custom solution available from AWS Marketplace.
C.Use VPC Flow logs to detect the issues and flag them accordingly.
D.Use AWS Cloudwatch to monitor all traffic.

Answer: B
Option B is CORRECT because AWS recommends using a custom solution in place for monitoring intrusions into their systems.
Options A, C and D are incorrect because they cannot be used as an appropriate intrusion detection solution on AWS.
For more information on using custom security solutions, please visit the below URLs
https://d1.awsstatic.com/Marketplace/security/AWSMP_Security_Solution%20Overview.pdf
https://aws.amazon.com/marketplace/solutions/infrastructure-software/ids-ips