Your company is planning to set up an application that will consist of a web layer. This web layer will consist of EC2 Instances sitting behind an Application Load Balancer. The company wants to protect the application against application level attacks. Which of the following can be used for this purpose?

Answer options:

A.AWS Cloudfront
B.AWS WAF
C.AWS Config
D.AWS VPC NACL

Answer – B
The AWS Documentation mentions the following.
You use AWS WAF to control how Amazon CloudFront or an Application Load Balancer responds to web requests. You start by creating conditions, rules, and web access control lists (web ACLs). You define your conditions, combine your conditions into rules, and combine the rules into a web ACL.
Option A is invalid because this is used for content delivery.
Option C is invalid because this is a configuration service.
Option D is invalid because this is used to block traffic based on simple rules.
For more information on how the AWS WAF works, please refer to the below URL-
https://docs.aws.amazon.com/waf/latest/developerguide/how-aws-waf-works.html