Question

A retail company runs a public API behind a global external Application Load Balancer. During flash sales, a small number of client IPs generate a massive volume of legitimate-looking requests that overwhelm backends, but the company does not want to fully block these clients — only slow them down when they exceed a fair usage threshold. Which Cloud Armor configuration meets this requirement?

Accepted Answer

Create a Cloud Armor security policy rule with action 'throttle' using rate-based ban keyed on the client IP, setting a request threshold and enforcement interval.

Answer

Create a Cloud Armor security policy rule with action 'deny(429)' matching all requests from the source region.

Answer

Enable Cloud Armor adaptive protection and rely on its automatic Layer 7 DDoS mitigation to drop excess traffic.

Answer

Configure a Cloud CDN cache policy to serve cached responses so the backends never receive the excess requests.