An ecommerce site was unavailable for 1 hour due to a DDoS attack. The security team wants to minimize downtime during future attacks. Which two actions will help achieve this? (Choose two.)

Subscribing to AWS Shield Advanced provides enhanced DDoS protection, including always-on detection and mitigation, and access to the AWS DDoS Response Team (DRT) for expert assistance during an attack, significantly reducing downtime. Using AWS WAF (Web Application Firewall) allows you to create custom rules to filter out malicious traffic patterns, such as those seen in DDoS attacks, before they reach your application, thus mitigating the attack effectively. Enabling Amazon GuardDuty is for threat detection and monitoring, not direct DDoS mitigation. VPC Flow Logs and Lambda for IP blocking are reactive and less scalable for large-scale DDoS attacks. EventBridge, CloudTrail, Config, and Systems Manager are for general security monitoring, auditing, and automation, not primary DDoS defense.