One option
17. AWS WAF
During a design review, the team identifies this need: filter malicious HTTP/S web requests. Which AWS service or concept is the most direct fit?