A company is experiencing distributed denial of service (DDoS) attacks targeting their web applications hosted on AWS. They want to implement a solution to protect their applications from these types of attacks. Which AWS service should they use?