User: you charge me when people make unauthorised requests to an S3 bucket?

AWS: yes of course

User: but

AWS: working as intended

User: but

AWS: thank you for your money

https://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1

How an empty S3 bucket can make your AWS bill explode

Imagine you create an empty, private AWS S3 bucket in a region of your preference. What will your AWS bill be the next morning?

Medium
@jonty The really messed up thing here is, if you use static web hosting from an S3 bucket, your bucket name HAS to match the domain through which it's served
@evanskaufman but then it’s a public bucket which falls into a different category of financial DDoS risk.