You can and should limit the number of parallel invocations and as a result your maximum bill.

If you want ddos protection and proper rate limiting amazon will happily charge you for it several different ways. Maybe you can hide these urls behind cloudflare if you're penny pinching..