Little known fact: the load balancer takes care of many DDOS attacks, and this protections requires no additional config or costs. For web applications, you ca

Little known fact: the load balancer takes care of many DDOS attacks, and this protections requires no additional config or costs. For web applications, you can use ALB to route traffic based on its content and accept only well-formed web requests. This means that many common DDoS attacks, like SYN floods or UDP reflection attacks, will be blocked by ALB, protecting your application from the attack. When ALB detects these types of attacks, it automatically scales to absorb the additional traffic. This scaling activities are transparent for AWS Customers and do not affect your bill.