AWS Certified Cloud Practitioner — Question 765

A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic.

Which AWS service will meet these requirements?

Answer options

• A. Amazon GuardDuty
• B. AWS WAF
• C. Amazon Macie
• D. AWS Shield

Correct answer: B

Explanation

AWS WAF allows users to define custom web ACL rules to monitor and control inbound HTTP and HTTPS requests. Amazon GuardDuty is a threat detection service that monitors for malicious activity, Amazon Macie is designed to discover and protect sensitive data in S3, and AWS Shield specializes in DDoS protection rather than custom web traffic filtering rules.