SAA-C03 Practice Test 2

During a product launch, a web application behind an Application Load Balancer slows to a crawl. The access logs show an HTTP request flood coming from a few thousand constantly changing IP addresses, each sending hundreds of requests a minute. Legitimate users rarely send more than 50 requests in any five-minute period.

The team needs to automatically block any single IP address that exceeds a request threshold, without maintaining a list of addresses by hand. What should the architect do?