Their security worked, you lost access so this is entirely your problem. I'm happy to see that AWS requires notarization to get past 2FA.

Regardless of the size of the bill, comparing it to cost of a notary (which is very minimal) is irrelevant.