A regional e-commerce business operates its website using Amazon EC2 instances placed behind an Application Load Balancer (ALB). Due to updated regulatory requirements, the application must now restrict access so that only users from a specific country are allowed to connect. A solutions architect must implement this restriction in a scalable, maintainable way that aligns with AWS best practices. What is the best solution to enforce this geographic restriction?