This is a dedicated watch page for a single video.
The Cloud Solutions team at TechCorp is responsible for an application running on EC2 instances in private subnets, fronted by an internet-facing ALB which serves as the origin for a CloudFront distribution protected by an AWS WAF web ACL. To prevent internet traffic from bypassing CloudFront and directly accessing the ALB, which solution offers the least operational overhead?