Which AWS service will help protect applications running on AWS from DDoS attacks?

Explanations:

Amazon GuardDuty is a threat detection service that monitors for malicious activity but does not specifically protect against DDoS attacks.

AWS WAF (Web Application Firewall) helps protect web applications from common web exploits, but it is not specifically designed to mitigate DDoS attacks.

AWS Shield is a managed DDoS protection service that safeguards applications from DDoS attacks, providing automatic protection and response.

Amazon Inspector is a security assessment service for applications but does not provide DDoS protection.