[mgkimsal]

If Amazon is letting someone attempt 1000 failed login attempts, even over several hours or a day, they're doing something wrong.

[nbpoole]

You also have to consider the possibility of an offline attack (ie: if Amazon's database were compromised and password hashes were leaked).