Just bandwidth or leaked keys or badly configured services. AWS had always been good to me and waived obvious problems as a courtesy, although I use Vultr because it supports the features we need and has some easier ipv6 options worth using (prefix routing)