A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The…

AWS Shield Advanced is a managed Distributed Denial of Service (DDoS) protection service that provides enhanced safeguards for applications running on AWS. It meets the requirements by offering near real-time visibility into attacks via Amazon CloudWatch metrics and detailed diagnostics. Most importantly, subscribing to Shield Advanced grants 24x7 access to the AWS Shield Response Team (SRT). The SRT provides expert assistance during a DDoS event, helping to mitigate the attack and restore application availability, which is a key requirement stated in the question.

A. AWS WAF protects against common web exploits at the application layer (Layer 7) but does not include a dedicated DDoS response team.
B. AWS Shield Standard offers automatic, baseline protection against common DDoS attacks but lacks advanced visibility and does not include access to the SRT.
C. Amazon Macie is a data security service that discovers and protects sensitive data. It is not a DDoS protection service.

1. AWS Documentation. (n.d.). AWS Shield Advanced. Amazon Web Services, Inc. Retrieved from https://aws.amazon.com/shield/features/. (See sections: "24x7 access to DDoS experts" and "Attack visibility and reporting").

2. AWS Documentation. (n.d.). What is AWS Shield?. AWS WAF, AWS Firewall Manager, and AWS Shield Advanced Developer Guide. Retrieved from https://docs.aws.amazon.com/waf/latest/developerguide/shield-chapter.html. (See section: "AWS Shield Standard and AWS Shield Advanced").

3. AWS Whitepaper. (2020). AWS Best Practices for DDoS Resiliency. Amazon Web Services, Inc. (See page 10, Table 1: "Comparing AWS Shield Standard and AWS Shield Advanced").