Question
A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud.
Which solution will meet these requirements?
- A. Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC.
- B. Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering.
- C. Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC. Correct
- D. Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC.
Explanation
AWS Network Firewall is designed to inspect and filter traffic flowing into and out of your VPCs, providing comprehensive protection with stateful inspection and a centralized management console. This aligns perfectly with the company's requirement to replicate their on-premises inspection server functionalities in AWS.
