You are designing a security strategy for a web application that is prone to DDoS attacks. Which AWS service would you primarily use to monitor and mitigate these attacks in real-time?