The correct answer is D, AWS Shield Advanced. This service provides comprehensive DDoS protection, including near real-time visibility into attacks and a dedicated response team for assistance during an attack. It is designed to protect a wide range of AWS resources, including Application Load Balancers and Amazon CloudFront distributions, which are mentioned in the question. AWS Shield Advanced offers a higher level of protection compared to AWS Shield Standard, which is automatically included for free on all AWS accounts but offers limited protection against common DDoS attacks. AWS WAF is a web application firewall that protects against web exploits, and Amazon Macie is a security service focused on discovering and protecting sensitive data, neither of which meet the specific requirements outlined in the question.