Which Azure service lets a financial company inspect and control HTTP(S) traffic to internal applications?

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. It operates at Layer 7 (the application layer) and includes a Web Application Firewall (WAF) that provides centralized protection of your web applications from common exploits and vulnerabilities. This makes it ideal for inspecting and controlling HTTP(S) traffic to internal applications for a financial company, ensuring security and compliance. Azure Firewall is a network security service that protects your Azure Virtual Network resources. While it can filter traffic, it operates at Layer 3 and 4 and doesn't offer the deep HTTP(S) inspection capabilities of Application Gateway. Azure Load Balancer distributes network traffic across multiple servers but operates at Layer 4 and doesn't provide application-level security or inspection. Azure VPN Gateway connects your on-premises networks to Azure through a secure tunnel and is not designed for inspecting application traffic.