Hi Cameron,
Azure Front Door already offers DDoS protection:
DDoS protection on Front Door
https://learn.microsoft.com/en-us/azure/frontdoor/front-door-ddos
Azure Front Door is a Content Delivery Network (CDN) that can help you protect your origins from HTTP(S) DDoS attacks by distributing the traffic across its 192 edge POPs worldwide. These POPs uses our large private WAN to deliver your web applications and services faster and more securely to your end users. Azure Front Door also includes layer 3, 4, and 7 DDoS protection and a web application firewall (WAF) to help protect your applications from common exploits and vulnerabilities.
Infrastructure DDoS protection
https://learn.microsoft.com/en-us/azure/frontdoor/front-door-ddos#infrastructure-ddos-protection
Tiers
https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview#tiers
Pricing
https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview#pricing
https://azure.microsoft.com/en-us/pricing/details/ddos-protection/
Hopefully this information helps.
If this is helpful please accept as answer or upvote.
Best regards,
Dillon Silzer, Director | Cloudaen.com | Cloudaen Computing Solutions