As part of application security compliance we are supposed to implement an IPS on our application. The application is basically an educational web portal where students can enrol for course assessment. The assessment will be done in the backend by professionals and the certificate is issued to the students. This involves payment also. The application is hosted in Kubernetes in AWS cloud.
We see that various levels of IPS are available in the market. Some includes threat intelligence models and SIEM modules. But for a small application like this, we don't think SIEM is not necessary. Also, taking into consideration that we are running short of budget, we would like to opt for a basic IPS that can effectively protect the web application.
I would like to invite suggestions. I am not looking for a specific tool recommendation, but rather a way of implementation.