Yes, but can you get more people from AWS with a (stolen) credit card, and are those people able to hack websites 24/7?