Which AWS service can the company use to meet this goal?

Explanations:

AWS WAF (Web Application Firewall) protects web applications from common web exploits but does not provide SSL/TLS encryption. It is primarily used for filtering and monitoring HTTP traffic.

AWS Shield is a managed DDoS protection service that safeguards applications from DDoS attacks. It does not deal with SSL/TLS encryption for securing web traffic.

Amazon VPC (Virtual Private Cloud) enables users to create isolated networks within AWS but does not provide SSL/TLS capabilities. It primarily focuses on network-level configuration and security.

AWS Certificate Manager (ACM) is specifically designed to manage SSL/TLS certificates for use with AWS services and can automatically handle the issuance and renewal of certificates, making it the appropriate choice for securing web application traffic.