A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access. The company must protect the REST APIs from SQL injection and cross-site scripting attacks. What is the MOST operationally efficient solution that meets these requirements?

• AConfigure AWS Shield.
• BConfigure AWS WAF.
• CSet up API Gateway with an Amazon CloudFront distribution. Configure AWS Shield in CloudFront.
• DSet up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront.