What should a solutions architect do to remediate the vulnerability?
Create a Classic Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
Create a Network Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
Create an Application Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
Create an Application Load Balancer. Put the web layer behind the load balancer and use AWS Shield Standard.
Explanations:
A Classic Load Balancer does not support advanced features like AWS WAF, which is crucial for mitigating XSS attacks.
A Network Load Balancer is designed for handling TCP traffic and does not integrate with AWS WAF, making it unsuitable for XSS protection.
An Application Load Balancer (ALB) supports HTTP/HTTPS and can integrate with AWS WAF, which can help filter malicious requests and mitigate XSS vulnerabilities.
While an Application Load Balancer can be used, AWS Shield Standard primarily protects against DDoS attacks and does not specifically address XSS vulnerabilities.
I rank that the answer is:
Create an Application Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.
If I had to guess, I’d say the answer is:
Create an Application Load Balancer. Put the web layer behind the load balancer and enable AWS WAF.