In an AWS environment, a company's three-tier web application has web servers in a public subnet and application/database servers in private subnets within the same VPC. A third-party virtual firewall from AWS Marketplace is deployed in an inspection VPC for packet inspection. What is the least operationally intensive method to integrate this firewall with the web application to inspect incoming traffic before it hits the web server?