Ddos AWS billed me almost 10k in 2 months

I have a few websites and somehow I got a huge bill of 10k for outbound traffic. Someone just ddos my s3 bucket bypassed the cloudflare cache and used huge bandwidth.

Be careful this is my last straw and I'm quitting AWS.

It's insane I can't limit the charges