I would be responsible. It is up to me - the server operator - the fulfill my contract with Amazon. I COULD have set up billing alerts, rate limiting, WAF, etc

I would be responsible. It is up to me - the server operator - the fulfill my contract with Amazon. I COULD have set up billing alerts, rate limiting, WAF, etc to avoid being charged or to shut down the unexpected usage, but I didn't. I put something on the internet so I am responsible for it.