Query Limiting (Depth & Amount)

Hello community,
Based on OWASP recommendations it is nice to have depth and amount limitations on queries that could be done over API.

https://cheatsheetseries.owasp.org/cheatsheets/GraphQL_Cheat_Sheet.html#query-limiting-depth-amount

Do we have any instruments to implement such technics with AppSync? If not, how AppSync protects solutions from Denial of Service (DoS) or Denial-of-Wallet (DoW) attacks?

Thank you in advance.

Start with the linked OWASP GraphQL Cheat Sheet section on query limiting by depth and amount, then investigate whether AWS AppSync exposes corresponding controls or documented protections against DoS and DoW attacks. Done means providing a clear, supported AppSync approach or documenting that no such instrument is available.

Written by the indexing model from the issue text.