Set up WAF for map APIs to protect against excess use

[coderbyheart]

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html with https://docs.aws.amazon.com/waf/latest/developerguide/waf-captcha-and-challenge.html