A SOC analyst is executing the organization's volumetric DDoS response playbook after monitoring shows a 40 Gbps UDP flood saturating the internet-facing links, causing the public web application to become unreachable. The on-premises firewall and IPS are already overwhelmed and dropping legitimate traffic along with attack traffic. The playbook step reads: 'Mitigate the attack volume before it reaches the enterprise edge.' Which tool or service should the analyst engage to satisfy this playbook step?