Full AWS Practitioner Certification Question

A digital news agency runs its public website on AWS. The architecture includes a set of Amazon EC2 instances behind an Application Load Balancer (ALB), with an Amazon Aurora database handling persistent storage. The cybersecurity team recently discovered that the site is susceptible to SQL injection attacks. The company wants to mitigate this threat quickly without modifying application code. What is the most effective way to address this vulnerability?