Your organization operates an HTTPS application in several Availability Zones utilizing an Elastic Load Balancing (ELB)

[answerhappygod]

Your organization operates an HTTPS application in several Availability Zones utilizing an Elastic Load Balancing (ELB) load balancer/PHP on a nginx server/RDS. To produce dynamic content, you must apply Geographic Restriction and specify the client's IP address in your application.

How should you scale this work by using AWS services?

A. Modify the nginx log configuration to record value in X-Forwarded-For and use CloudFront to apply the Geographic Restriction.
B. Enable ELB access logs to store the client IP address and parse these to dynamically modify a blacklist.
C. Use X-Forwarded-For with security groups to apply the Geographic Restriction.
D. Modify the application code to use value of X-Forwarded-For and CloudFront to apply the Geographic Restriction.