What does Alibaba Cloud DDoS do to protect and enhance system stability?

What should I do when my web app faces DDoS attack?

I am not facing any such attacks now, but would like to know the steps so that I can prepare myself in advance. I will host my app on Azure or AWS.