Which AWS service or feature can meet this requirement?
AWS WAF
AWS Shield
Network ACLs
Security groups
Explanations:
AWS WAF (Web Application Firewall) is specifically designed to protect web applications from common web exploits, including SQL injection attacks.
AWS Shield is primarily a DDoS protection service and does not directly address SQL injection attacks.
Network ACLs control inbound and outbound traffic at the subnet level but do not provide specific protection against SQL injection.
Security groups act as virtual firewalls for EC2 instances and control traffic, but they do not specifically target web application vulnerabilities like SQL injection.