AWS Certified Security - Specialty (#5)

Which of the following are valid event sources that are associated with web access control lists that trigger AWS WAF rules? (Choose two.)

Amazon S3 static web hosting
Amazon CloudFront distribution
Application Load Balancer
Amazon Route 53
VPC Flow Logs