Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?

Explanations:

Amazon VPC (Virtual Private Cloud) is used to provision a logically isolated section of the AWS cloud but does not specifically protect against DDoS attacks.

AWS Shield is a managed DDoS protection service that safeguards applications running on AWS, offering automatic detection and mitigation of DDoS attacks.

AWS Audit Manager is used for auditing and compliance management, not for DDoS protection, and does not provide any security against such attacks.

AWS Config is a service that helps assess, audit, and evaluate the configurations of AWS resources but does not provide DDoS protection.