HOW AWS PROTECTS CUSTOMERS FROM DDOS EVENTS

Summary from the TLDR InfoSec newsletter

A post from the AWS security team on how CloudFront automatically detected and mitigated a new form of DDoS. This DDoS attack is known as an HTTP/2 rapid reset attack. In this attack, an attacker issues multiple requests for streams and then issues a reset for each of those requests. This causes the server to waste resources generating logs even if nothing is returned to the clients.