Background: I'm building a web application using Amazon API Gateway, Amazon S3, AWS Lambda and so on.
Note: If you don't know about AWS, any pieces of advice would be highly appreciated.
Searching how to protect API Gateway from DDoS attacks, I've found some keywords like AWS Shield, AWS WAF and so on. Anyways aside from those, I've hit upon an idea.But googling the idea, the search does not hit any, so I can not be sure if the idea is correct.
The idea is something like the below.
Authenticated users get endpoints dynamically which means there is an endpoint to get endpoints to access resources. Now some endpoint gets down because of DDoS attacks and users get 503 error but users automatically get a backup endpoint by "the endpoint to get endpoints" because I write the frontend code like so and create some copied backup endpoints in Amazon API Gateway.
I would like to know if this would work fine.