
Ultimate access to all questions.
A company's serverless application, utilizing Amazon API Gateway and AWS Lambda, has experienced a surge in traffic due to botnet-induced fraudulent requests. What measures should a solutions architect implement to mitigate unauthorized access? (Select two strategies.)
A
Establish a usage plan with a restricted API key for authorized users.
B
Embed logic in the Lambda function to disregard requests originating from identified fraudulent IP addresses.
C
Deploy an AWS WAF rule to identify and mitigate malicious traffic.
D
Transform the public API into a private one, with DNS updates to guide users to the updated endpoint.
E
Assign unique IAM roles to users for API access, requiring role assumption during each API call.