title: How to protect AWS API gateway endpoint from DDos attack?
body: <p>Recently I have been working with AWS API gateway where I created an API and protected it with API key and Cognito (OAuth). </p>
  
  <p>One day I found that my API has been accessed 10K times which failed because of attacker didn't had the access to it.</p>
  
  <p>My question is : Does Amazon charge for such api calls which are unauthorized? If they charge then how to protect it. As I understand even if I put WAF in front it my API url will still be exposed ....</p>
  
  <p>Any help is appreciated...</p>