AWS WAF for CloudFront HTTP/HTTPS Monitoring

Why the Answer Is Correct

Amazon Web Services (AWS) WAF (Web Application Firewall) is designed specifically to protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. It inspects HTTP and HTTPS requests and allows you to create rules to allow, block, or count web requests based on conditions such as IP addresses, HTTP headers, body content, URI strings, and query strings. Since the requirement is to monitor and block malicious requests for CloudFront distributions, AWS WAF is the ideal integrated solution.

Why the Other Options Are Wrong

Amazon GuardDuty is a threat detection service that uses machine learning to identify suspicious activity, such as compromised instances or unauthorized API calls, but it does not act as a firewall to block HTTP/HTTPS traffic. Amazon Inspector is an automated security assessment service that scans EC2 instances and container images for vulnerabilities and deviations from best practices; it does not filter live web traffic. Amazon Detective analyzes logs and traces to investigate potential security issues but does not have the capability to block incoming requests.

Community Comment Notes

The community consensus strongly supports AWS WAF. As one user noted, "HTTP HTTPS deals with web so AWS WAF ez:)" Another comment reinforced this by stating that "An AWS WAF rule defines how to inspect HTTP(S) web requests and the action to take..." These comments highlight the direct link between web protocols and the WAF service.