A solutions architect needs to enhance the security of a public-facing application. The application should be safeguarded from widespread Internet threats including, but not limited to, automated bots and vulnerabilities like injections. Additionally, it must have capabilities to thwart bursts of illegitimate requests. Which of the following should the architect recommend to fulfill these requirements?
A service for the storage and management of sensitive information and credentials
A service for managing user identities and federations
A service dedicated to guarding against DDoS attacks
A service focused on monitoring and controlling web traffic with customizable security rules