A company’s website is experiencing a DDoS attack. Which AWS service is designed to help protect the site from these attacks?

AWS Shield is the correct answer because it is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. It provides always-on detection and automatic inline mitigations that minimize application downtime and latency. AWS Shield Standard is automatically included for all AWS customers at no additional cost. AWS Shield Advanced offers enhanced protections for higher levels of assurance. AWS Resource Access Manager (RAM) is used for sharing resources across AWS accounts, not for DDoS protection. AWS Amplify is a set of tools and services that helps developers build full-stack applications, and it does not directly provide DDoS protection. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior, but it is not specifically designed for DDoS mitigation.