Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?