An e-commerce site has seen a surge in bot attacks. You need to ensure API security without affecting performance. Which GCP services should you employ for this use case?

*Explanation: To ensure API security without compromising performance in response to bot attacks, the ideal combination of GCP services is **Cloud Armor with HTTP(S) Load Balancer and Cloud Endpoints** (Option A. . This combination provides robust security while maintaining high performance. Option B (App Engine with Cloud Identity-Aware Proxy) may add latency and is not the best choice for performance-critical scenarios. Option C (Cloud CDN with Cloud Monitoring) does not primarily focus on API security. Option D (Cloud NAT with VPC Service Controls) may not be the most optimal solution for API security in this context. Option E (Cloud Run with API Gateway and reCAPTCHA Enterprise) could introduce unnecessary latency and is not the most suitable choice for this use case.*