A. An NACL that blocks all ports to your subnets.
B. A restricted bucket policy.
C. A WAF on the load balancer.
D. A WAF on your CloudFront distribution.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.