A company uses a content management system (CMS) for its corporate website, but patching and maintenance are burdensome. The company is redesigning the site. The website will be updated four times a year, requires no dynamic content, and must provide high scalability and enhanced security. Which combination of changes meets these requirements with the LEAST operational overhead? (Choose two.)

The correct options are to create the new website and an Amazon S3 bucket with static website hosting enabled, and to configure Amazon CloudFront in front of the website to use HTTPS functionality. An S3 bucket configured for static website hosting is ideal for websites with no dynamic content and infrequent updates, offering high scalability and minimal operational overhead compared to managing EC2 instances. CloudFront, a content delivery network (CDN), enhances security by providing DDoS protection and HTTPS, and improves performance by caching content closer to users. Deploying an AWS WAF web ACL in front of the website provides security but does not inherently provide HTTPS functionality; CloudFront or a load balancer is typically used for that. Creating and deploying an AWS Lambda function to manage and serve the website content would introduce unnecessary complexity and operational overhead for a static website. Deploying the website using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer would be overly complex and expensive for a static website with no dynamic content, increasing operational overhead significantly.