Giving firebase cloud function endpoints to public use, how do I protect my other endpoints?

Question

I am giving my api to the public, like how facebook and youtube does. How do I protect my other endpoints from being ddos\'ed or exposed? The only way I can think of is usin