If someone is going to throw 10gbit ddos at your home ip - how few firewall rules are going to help? I am not very well versed in ddos, but that's just traffic

If someone is going to throw 10gbit ddos at your home ip - how few firewall rules are going to help? I am not very well versed in ddos, but that's just traffic generated from thousands of bots. Its still takes bandwidth and will literally overload your link. I assume AWS has multiple upstream links where the traffic is coming via multiple links and its easier for them to handle than for someone with one or few upstream links.