An online retail company recently deployed a production web application. The system administrator needs to block common attack patterns such as SQL injection and cross-site scripting.
Which AWS service should the administrator use to address these concerns?