The information security department is looking to protect the organization's AWS environment from common web$-$based exploits. Which AWS capability should they use?

AWS Shield

AWS Web Application Firewall $($WAF$)$

Amazon Route $53$

AWS CloudHSM