A media company is launching a new streaming service that will serve content globally. The service is expected to handle a high volume of traffic and is susceptible to DDoS attacks. Which AWS services would you recommend to ensure robust edge security, considering threat mitigation, access control, and performance optimization?