Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 340 discussion

A. Use AWS WAF in front of the ALB. Associate the appropriate web ACLs with AWS WAF. SQL Injection - AWS WAF DDoS - AWS Shield

Answer - A https://aws.amazon.com/premiumsupport/knowledge-center/waf-block-common-attacks/#:~:text=To%20protect%20your%20applications%20against,%2C%20query%20string%2C%20or%20URI. ----------------------------------------------------------------------------------------------------------------------- Protect against SQL injection and cross-site scripting To protect your applications against SQL injection and cross-site scripting (XSS) attacks, use the built-in SQL injection and cross-site scripting engines. Remember that attacks can be performed on different parts of the HTTP request, such as the HTTP header, query string, or URI. Configure the AWS WAF rules to inspect different parts of the HTTP request against the built-in mitigation engines.

AWS WAF - for SQL Injection ---> A AWS Shield - for DDOS Amazon Inspector - for automated security assessment, like known vulnerability

° Use AWS WAF in front of the Application Load Balancer ° Configure appropriate WAF web ACLs to detect and block SQL injection patterns The key points: ° Website hosted on EC2 behind an ALB with Aurora database ° Application is vulnerable to SQL injection attacks ° AWS WAF is designed to detect and block SQL injection and other common web exploits. It can be placed in front of the ALB to inspect all incoming requests. WAF rules can identify malicious SQL patterns and block them.

SQL injection -> WAF

WAF is the right one

SQL Injection - AWS WAF DDoS - AWS Shield

Answer C - Shield Advanced (WAF + Firewall Manager)

It is A. I am happy to see Amazon gives out score like this...

AWS WAF is a managed service that protects web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources. AWS WAF enables customers to create custom rules that block common attack patterns, such as SQL injection attacks. By using AWS WAF in front of the ALB and associating the appropriate web ACLs with AWS WAF, the company can protect its website application from SQL injection attacks. AWS WAF will inspect incoming traffic to the website application and block requests that match the defined SQL injection patterns in the web ACLs. This will help to prevent SQL injection attacks from reaching the application, thereby improving the overall security posture of the application.

Bhawesh answers it perfect so I'm avoiding redundancy but agree on it being A.