title: DDoS attack handling strategies
body: <p>I am building a website to carry out a survey and this would store some answers and user data. Obviously, I want to keep costs low and within what the free tier offers. I am trying to build a low-cost solution for mitigating DDoS attacks. Here is what I have come up with but not sure if I am going in the right direction. I plan to put my frontend as well backend service behind CloudFront. I would put AWS WAF and Shield on this CloudFront. Along with that, I plan to add two WAF rules:</p>
  <ul>
  <li>Every request should have a &quot;user-agent&quot; header</li>
  <li>Requests should originate only from a specific country i.e the one
  with my target audience</li>
  </ul>
  <p>Along with this, I plan to add a Recaptcha to ensure only human users interact with my application just as a deterrent from cost perspective. Any other suggestion or feedback is really appreciated. Please note: cost is a huge factor.</p>