AWS Service for Custom Web Traffic Filtering Conditions
Short answer
B AWS WAF allows you to create custom rules to filter and control inbound HTTP/HTTPS web traffic to your applications.
Question
Key Takeaways
The question tests the specific capability of AWS WAF to evaluate HTTP/HTTPS requests based on customizable rules, distinguishing it from network-level or threat-intelligence-based services.
AWS WAF is the correct service for implementing custom conditions to filter and control inbound web traffic on EC2-hosted applications. This page explains how WAF integrates with Application Load Balancers and CloudFront to protect against common web exploits.
Common mistake: Learners often confuse AWS WAF with AWS Shield because both provide web protection. However, Shield is primarily for DDoS mitigation (Layer 3/4), while WAF handles Layer 7 application-level filtering with custom logic.
Expert Analysis
Why the Answer Is Correct
AWS WAF (Web Application Firewall) is designed specifically to filter and control web traffic based on customizable security rules. It allows you to define conditions such as IP addresses, HTTP headers, query strings, and body content to allow, block, or count requests. Since the requirement is to implement "custom conditions" for "inbound web traffic," AWS WAF is the precise tool for this job.
Why the Other Options Are Wrong
Amazon GuardDuty (A) is a threat detection service that monitors for malicious activity using ML and threat intelligence; it does not actively filter or block traffic via custom rules in real-time. Amazon Macie (C) uses machine learning to discover and protect sensitive data (like PII) in S3 buckets, not for general web traffic filtering. AWS Shield (D) provides DDoS protection, but its standard features are automatic and do not offer the granular, custom rule-based filtering described in the scenario.
Community Comment Notes
The community consensus strongly supports AWS WAF. One user noted that "AWS WAF helps you protect against common web exploits and bots," which aligns with the need for traffic control. Another simply confirmed B is correct. The high vote share indicates clear understanding of the distinction between WAF and Shield.
Exam Strategy
When you see keywords like 'web traffic', 'HTTP/HTTPS', 'SQL injection', 'cross-site scripting', or 'custom rules', immediately think AWS WAF. If the question mentions 'DDoS' or 'availability' without custom rules, consider AWS Shield instead.
Frequently Asked Questions
Why not use AWS Shield for custom web traffic filtering?
Can AWS WAF work with Amazon EC2 instances directly?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
its_tima 👍 1"AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources."
-
Zerro 👍 2 Answered BI think B is correct
-
ShaiTay 👍 1 Answered BB. AWS WAF
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →