Question

A company runs a public e-commerce web application behind an Application Load Balancer (ALB) in a VPC. Recently, security logs revealed repeated SQL injection attempts and malicious HTTP requests targeting the application's login and search pages. The security team needs a managed solution that inspects incoming HTTP/HTTPS requests at the application layer and blocks these attack patterns before they reach the backend instances, while allowing legitimate traffic. Which approach best meets these requirements?

Accepted Answer

Associate AWS WAF with the Application Load Balancer and configure web ACL rules, including AWS managed rule groups for SQL injection and common attacks.

Answer

Enable AWS Shield Standard on the ALB to automatically detect and block SQL injection at the application layer.

Answer

Modify the security groups on the backend EC2 instances to deny requests containing SQL injection strings.

Answer

Enable Amazon GuardDuty to inspect and drop malicious HTTP requests targeting the login and search pages.