I have no much experience with co-located services so can't really comment on that. I can't go in detail how and what mitigations are applied on AWS site also,

I have no much experience with co-located services so can't really comment on that. I can't go in detail how and what mitigations are applied on AWS site also, as I feel obliged to leave as much weapons on a "good" side of ddos as possible, and knowledge is one of those. What I remember pushing BGP flowspec updates upstream was thought about as something close to impossible though.