DDoS Protection for Azure App Service

I am intending to make a Web application with the following https://docs.microsoft.com/en-us/azure/architecture/example-scenario/sql-failover/app-service-private-sql-multi-region

According to this question's https://social.msdn.microsoft.com/Forums/sqlserver/en-US/92733178-f305-4994-b954-67da945f40a7/azure-traffic-manager-and-ddos-attacks?forum=WAVirtualMachinesVirtualNetwork. It seems like the Traffic Manager can handle DDoS attacks send at the TM. But It is unclear whether the App Service can handle DDoS attacks sent directly to the App Service endpoint.

So my question is whether App Services currently handle DDoS attacks within Azure itself, or if not how do we configure App Services to be secure from DDoS attacks