Does Azure provide DDoS protection for its PaaS services?

Hi, I am working on a project wherein we will deploy Storage Account, KeyVault, ServiceBus, CosmosDB, and SQL DB in our subscription. All these services will be deployed with public access enabled, ...