Identify expensive operations and attack the user:
Such as download large S3 object many times
AWS inbound emails IP blocking doesn't cost customer, but target email blocking costs, i.e. delivering to accountnotexist@example.com does not work (unless using catch-all), but costs the customer money
Identify expensive operations and attack the user: