That is peanuts for AWS. The OPs point stands: pretty much no engineer or software company suffered serious consequences over their security practices. The worst was some internet drama and slightly lower *profit*.
Ashley Madison tanked from a data break, and there's an ever growing list of cryptocurrency exchanges that were hacked and ended. It may be that for some businesses a data breach is manageable, but that's not always the case, though more importantly that kind of attitude towards the seriousness of data breaches and vulnerabilities is not wise.