Hi @nj2
In AEM, there are several methods available to safeguard custom AEM Forms from bot attacks. These methods can be implemented using either Managed Services or Cloud Services.
1.CAPTCHA:
2.Form Validation
3.Rate Limiting
4.Hidden Fields
5.JavaScript Validation
6.IP Whitelisting/Blacklisting
7. Security Auditing
Adobe Manages Services (AMS) and AEM as a Cloud Service (AEMaCS) are different offers by Adobe.
While AMS is more of a hosting offer for "classic" AEM 6.5 (similar to on-premise setups but run at/by Adobe), AEMaCS is a Software as a Service (SaaS) offer. Also AEMaCS has quite some differences compared to AEM 6.5 [1].
For additional details on AMS, please refer to this documentation [2] or ask your Adobe representative.
For additional details on AEMaCS, please refer to this documentation [3] (or ask your Adobe representative).
Hope that helps!
[1] https://experienceleague.adobe.com/docs/experience-manager-cloud-service/overview/what-is-new-and-di...
[2] https://helpx.adobe.com/legal/product-descriptions/adobe-experience-manager-managed-services.html
[3] https://helpx.adobe.com/legal/product-descriptions/aem-cloud-service.html