ALB (Application Load Balancing) is a layer 7 load balancer on AWS ELB.
For ALB - is there an equivalent of fail2ban which can prevent DDoS attacks?
Have you checked out AWS WAF? Not part of ALB per se, but may meet the goal.