For comparison, I believe AWS LightSail users might be covered for DDOS protection for free but maybe I'm reading too much into their statement.
https://docs.aws.amazon.com/waf/latest/developerguide/ddos-s...
https://docs.aws.amazon.com/waf/latest/developerguide/ddos-s...