A company asks which AWS offering provides baseline DDoS protection automatically at no additional charge to AWS customers. Which answer is correct?

1. Amazon Macie
2. AWS Secrets Manager
3. AWS Shield Standard
4. AWS Shield Advanced