A company is concerned about web attacks against its public application, which uses an Application Load Balancer (ALB). A solutions architect must reduce the risk of DDoS attacks against the application. What should the solutions architect do?

AWS Shield Advanced provides enhanced DDoS protection for applications running on AWS, including those behind an Application Load Balancer (ALB). It offers always-on detection and automatic inline mitigations that minimize application downtime and latency from DDoS attacks. This directly addresses the requirement to reduce the risk of DDoS attacks. Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS, but it doesn't prevent DDoS attacks. Amazon Macie is a data security and privacy service that uses machine learning to discover and protect sensitive data in AWS, not for DDoS prevention. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, but it's a detection service, not a prevention service for DDoS attacks.