The team is organizing the roles of several AWS security capabilities.
Choose the feature for web-request control and the service for organization-wide policy application.
Choose TWO correct service-role pairs.
AWS WAF controls requests for associated web resources, while AWS Firewall Manager applies protection policies across accounts and resources.
Detailed explanation
Trusted Advisor presents recommendations; WAF is the request-filtering service.
Trusted Advisor presents recommendations; WAF is the request-filtering service.
Firewall Manager manages WAF and related protection policies throughout an organization.
Firewall Manager manages WAF and related protection policies throughout an organization.
AWS WAF uses a web ACL and rules to control HTTP or HTTPS requests.
AWS WAF uses a web ACL and rules to control HTTP or HTTPS requests.
Marketplace catalogs third-party products and does not manage root credentials.
Marketplace catalogs third-party products and does not manage root credentials.
Check official documentation
Compare the following points with the official documentation.
AWS WAF Developer GuideのWAFとFirewall Managerの説明を確認する。
What to confirm
Web ACLによるリクエスト制御と、組織横断の保護ポリシー適用を別の役割として説明できる。
Key points
- AWS WAF
- AWS Firewall Manager
- Web ACL
- Organization-wide management
Notes
- Environment: AWS公式WAF・Firewall Managerドキュメントの確認
- Confirm current security service capabilities and support-plan conditions in the official AWS documentation.
Foundation review
Resource-level control
WAF evaluates requests for its associated resources.
Policy distribution
Firewall Manager provides the organizational scope; it does not replace the WAF rule engine.