Ask HN: Mitigating malicious AWS bandwidth usage

You could set up Splunk to pull all your logs together, calculate bandwidth, and then make email alerts for when you hit various thresholds.

It might help to firewall out BOGOB IPs and known malicious IPs. These lists have to be actively maintained on the firewall.

CloudFlare has unlimited bandwidth. I'm not affiliated, and it doesn't exactly answer your question, but perhaps this is a useful thought.

Signed requests!