You are recently hired as an AWS architect in a startup company. The company just developed an online photo-sharing product. After the product was deployed for some time, you have found that the instances in the Auto Scaling group have reached the maximum value from time to time due to the high CPU rate and traffic.

Answer options:

A.The global CloudFront distribution that the product is using.
B.The Auto Scaling group that the product has used.
C.All EC2 instances created for the product. Add each instance ID to associate with the ACL.
D.The application load balancer for the product.
E.The network load balancer for the product, however, only in US East (N. Virginia) region.

Correct Answer – A, D
For AWS WAF, an ACL can be configured to control the HTTP and HTTPS requests that are forwarded to an Amazon API Gateway API, Amazon CloudFront, or an Application Load Balancer.
Option A is CORRECT: Because CloudFront distribution is a global resource that WAF ACL can be associated with.
Option B is incorrect: Because the Auto Scaling group is not a valid resource that ACL can be linked with.
Option C is incorrect: Same as Option
B.Option D is CORRECT: Because the application load balancer in a region can be selected for the ACL as below.
Option E is incorrect: Because the network load balancer is not supported. For the regions where the application load balancer is supported for AWS WAF ACL, please check the AWS document in
https://docs.aws.amazon.com/general/latest/gr/rande.html#waf_region.