SAA-C03 Q567 · Security

Question

A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access. The company must protect the REST APIs from SQL injection and cross-site scripting attacks. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

**Answer B: Configure AWS WAF** is correct for these reasons:

1. **SQL injection & XSS protection**: AWS WAF (Web Application Firewall) is specifically designed to protect against application-layer (Layer 7) attacks including SQL injection and cross-site scripting (XSS). It provides **managed rule groups** (like the AWS Managed Rules Core Rule Set and SQL Database Rule Set) that detect and block these exact attack patterns.

2. **Direct integration with API Gateway**: AWS WAF natively integrates with Amazon API Gateway REST APIs. You can associate a WAF Web ACL directly with an API Gateway stage — **no CloudFront distribution required**. This is a key point many candidates miss.

3. **Most operationally efficient**: The question asks for operational efficiency. Configuring WAF directly on

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips