DDoS Attack Response

Let’s say you’re a software engineer on the Amazon retail website team, and over the past hour, the site has experienced a surge in traffic from thousands of suspicious IP addresses, leading to frequent outages and slow page loads for normal shoppers.

How would you analyze and respond to this potential DDoS attack, and what steps would you take to prevent similar incidents in the future?