A global company is using Amazon API Gateway to design REST APIs for its loyalty club users in the us-east-1 Region and the ap-southeast-2 Region. A solutions architect must design a solution to protect these API Gateway managed REST APIs across multiple accounts from SQL injection and cross-site scripting attacks. Which solution will meet these requirements with the LEAST amount of administrative effort?

1. Set up AWS WAF in both Regions. Associate Regional web ACLs with an API stage.
2. Set up AWS Firewall Manager in both Regions. Centrally configure AWS WAF rules.
3. Set up AWS Shield in both Regions. Associate Regional web ACLs with an API stage.
4. Set up AWS Shield in one of the Regions. Associate Regional web ACLs with an API stage.