[gyey]

Precisely. The majority of people who are be afraid of using AWS services for the risk of a bill shock due to a DDoS would be small customers who won't be able to afford the 3,000$ per month price tag for the advanced shield anyways. For them, it's still risky to use AWS.

[toomuchtodo]

Unless you're spending $xx,xxx or above monthly with AWS, you're probably better off using Cloudflare for DDOS protection.

EDIT: Number is professional opinion from my experience running large AWS accounts over the last 10 years.