AWS Certified Solutions Architect - Associate

AWS Certified Solutions Architect - Associate

Get started today

Ultimate access to all questions.


A company's web application, hosted on EC2 instances with an Application Load Balancer, must now be restricted to access from a single country as per new policy. What is the appropriate configuration to enforce this restriction?




Explanation:

The correct answer is C: Implement AWS WAF on the Application Load Balancer within a VPC. AWS WAF (Web Application Firewall) allows you to create conditions and rules that can include IP address filtering based on geographic location. This enables you to restrict access to the web application from only the specified country. Security groups and network ACLs do not provide the granularity required to enforce geographic restrictions.