Rate Limit middleware is setup in Program.cs file, but it's commented out to not enabled by default because it need to apply to each use-case carefully.
Consult the following Microsoft documentation to understand each option and decide which type of rate limit works for your app: