I think we all need to read Enterprise Integration Patterns.

You would have an idempotent queue + a circuit breaker pattern. If the queue depth is too large - you break the circuit.

But if your profit per request is higher than your infracost per request - why not autoscale till the cows come home? Within reason of course.