I am learning AWS , and came across hosting static websites using Amazon S3 and distributing to edge locations using Cloud Front and Route53.

I know that for Cloud front we pay for what we use. So my monthly bill will reflect the number of requests I get once the free tier is over.

My question is what if a hacker or someone sends a lots of requests like spamming, then will I be charged higher?
How to prevent this and does AWS has any security measures like limiting the number of requests to serve per minute or something for this ?

Pardon me if my question is very basic. I am just learning . Thanks