A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS.
Which AWS service should the company use?
Amazon GuardDuty
Amazon Inspector
AWS Shield Advanced
Amazon Macie
Explanations:
Amazon GuardDuty provides intelligent threat detection for monitoring malicious activity and unauthorized behavior, but it does not mitigate DDoS attacks.
Amazon Inspector assesses security vulnerabilities in applications and infrastructure but does not provide DDoS protection.
AWS Shield Advanced offers enhanced DDoS protection, providing real-time detection and mitigation against large and sophisticated DDoS attacks.
Amazon Macie is used for discovering and protecting sensitive data, such as PII, in Amazon S3, not for defending against DDoS attacks.