Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 961 discussion

C as AWS WAF cannot be used directly on global accelerator

WAF can be applied on ALB, API gateway or cloud front.

Answer is C. Note: AWS Global Accelerator itself doesn't support AWS WAF. https://repost.aws/knowledge-center/globalaccelerator-aws-waf-filter-layer7-traffic

Configuring the WAF directly on the Global Accelerator ensures that malicious traffic is blocked before it reaches the Application Load Balancer, providing an additional layer of protection.

Global Accelerator can be integrated with AWS WAF to provide protection at the edge, meaning malicious traffic can be blocked before it reaches your Application Load Balancer (ALB) or other resources in your AWS environment.

Answer is A AWS Global Accelerator (GA) can be used with AWS Web Application Firewall (WAF) to protect applications from web exploits and DDoS attacks: Block HTTP method and header attacks GA, WAF, and the Application Load Balancer can block access to Layer 7 HTTP method and headers. WAF uses web access control list (web ACL) rules with the load balancer to evaluate incoming traffic and only forward requests that comply with the rules to the endpoint. Detect and mitigate web application layer request floods GA can protect web applications running on Application Load Balancer, and when used with WAF, it can also detect and mitigate web application layer request floods. Prevent DDoS attacks

Answer is A

Correct answer C. Global Accelerator does not work with WAF as it is suitable for TCP/UDP where as WAF is integrates with Application Load Balancer which is on Layer 7 on OSI model, suitable for Web app (Http/Https)