A company runs a public web application on Amazon EKS behind Amazon CloudFront and an...

Vendor: Amazon Web Services
Product: SCS-C03
Update on: Jul 2, 2026
Questions: 231

Amazon Web Services SCS-C03 Question Answer

A company runs a public web application on Amazon EKS behind Amazon CloudFront and an Application Load Balancer (ALB). A security engineer must send a notification to an existing Amazon SNS topic when the application receives 10,000 requests from the same end-user IP address within any 5-minute period.

Which solution will meet these requirements?

Configure CloudFront standard logging and CloudWatch Logs metric filters.

Configure VPC Flow Logs and CloudWatch Logs metric filters.

Configure an AWS WAF web ACL with an ASN match rule and CloudWatch alarms.

Configure an AWS WAF web ACL with a rate-based rule. Associate it with CloudFront. Create a CloudWatch alarm to notify SNS.