Which AWS service analyzes an AWS environment and gives best-practice recommendations across cost, performance, service limits, fault tolerance, and security?

AWS Trusted Advisor analyzes your AWS environment and provides real-time guidance to help you provision your resources following AWS best practices. It offers recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits. AWS Shield is a managed DDoS protection service. AWS WAF (Web Application Firewall) helps protect web applications from common web exploits. AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS.