A company migrated to AWS and needs to protect traffic flowing in and out of its production VPC. Previously an on-premises inspection server performed traffic inspection and filtering. The company wants the same functionality in AWS. Which solution meets these requirements?

AWS Network Firewall is a managed service that makes it easy to deploy, set up, and scale network firewalls in your Amazon VPC. It provides fine-grained network traffic inspection and filtering, including stateful inspection, intrusion prevention, and web filtering, directly addressing the need for an on-premises inspection server replacement. GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, but it does not perform traffic filtering. Traffic Mirroring allows you to capture and inspect network traffic, but it requires a separate inspection appliance or service to perform the actual filtering. AWS Firewall Manager is a security management service that helps you centrally configure and manage firewall rules across multiple accounts and VPCs, but it relies on other AWS firewall services (like AWS Network Firewall or WAF) to actually perform the inspection and filtering.