That's why you put your services behind a CDN, even if it's not cacheable traffic. Then you can rate limit what's coming to you.

With the cloud, that DDoS can bankrupt you by causing you unconstrained bills instead.