Yeah, at the very least slap a leaky bucket on there. https://en.wikipedia.org/wiki/Leaky_bucket

Also, a user navigating to /search/:title is currently shown a raw error .json that exposes both your HMAC signature and your AWS access ID