How to protect Web application from DoS attack

I'm going to make a web site and open it to public.

I'm afraid of DoS attack for that. For example, a malicious user save many images, and it makes my aws account charge much money like so.

How can we protect it? Web server settings like nginx.conf?

Please give me some wisdom 🙏