A retail company runs a public-facing web application on Google Cloud behind an external HTTP(S) load balancer. During a major sale event, the security team notices a large volume of malicious traffic attempting to overwhelm the site with a distributed denial-of-service (DDoS) attack, along with SQL injection attempts. Which Google Cloud service should the team use to protect the application at the network edge?