Does serverless has protections against denial or service? Couldn’t an attacker use all the quotas or empty the bank account using something like apache bench o

Does serverless has protections against denial or service? Couldn’t an attacker use all the quotas or empty the bank account using something like apache bench on a raspberry pi or t2.nano ?