attacks are frequent, and then you gotta deal with waiting on aws to confirm it was an attack and refund etc. it's easy to avoid attacks with best practices but the fact stands that they are still common in customer accounts and then you have a financial risk on top of the attack risk.