AWS Certified Cloud Practitioner

Explanation

AWS Shield is the correct service for DDoS protection:

• AWS Shield: A managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations to minimize application downtime and latency.

• Amazon Inspector: An automated security assessment service that helps improve the security and compliance of applications deployed on AWS by identifying vulnerabilities.

• Amazon GuardDuty: A threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect AWS accounts and workloads.

• Amazon Detective: A security service that makes it easier to analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities.

AWS Shield is specifically designed to protect against DDoS attacks, making it the appropriate choice for this scenario.