A gaming company is deploying a new multiplayer gaming lobby API on AWS. The company needs to protect the API endpoint against distributed denial of service (DDoS) attacks at the network layer, and block malicious Layer 7 request patterns such as HTTP floods. Which combination of AWS services should a Solutions Architect recommend to meet these requirements? (Select TWO.)
- AWS WAF to analyze and block malicious application-layer (Layer 7) web requests.Cevap
- AWS Shield Advanced to provide automatic mitigation against distributed denial of service (DDoS) attacks at the network and transport layers (Layer 3 and 4).Cevap
- CNetwork Access Control Lists (NACLs) configured to dynamically track request rates and block IP addresses at the edge.
- DSecurity groups applied at the subnet level to filter out volumetric DDoS attacks.
- EAWS Shield Standard to inspect and block Layer 7 vulnerabilities such as SQL injection.
Cevap
The correct services are AWS WAF and AWS Shield Advanced.
To satisfy both requirements, the Solutions Architect should recommend AWS WAF and AWS Shield Advanced. AWS WAF protects the API endpoint at the application layer (Layer 7) by inspecting incoming request characteristics and implementing rate limits. AWS Shield Advanced protects resources against Layer 3 and Layer 4 volumetric attacks, ensuring infrastructure-level availability.
Adım Adım Çözüm
Anahtar Kavram
AWS Edge Security and DDoS Mitigation Layer Separation