A denial-of-wallet attack exploits cloud infrastructure that scales without control to cause financial harm. Attackers send enormous request volumes or trigger operations that are expensive to compute. section 5.1.1
Serverless platforms normally scale automatically, but that behavior can turn a distributed denial-of-service attack into rapidly escalating cloud costs. Treat uncontrolled resource consumption as a financial risk as well as an availability risk. section 5.1.1
Recognize the main attack patterns:
- Send millions of requests from distributed nodes. section 5.1.1
- Trigger endpoint operations that consume unusually expensive compute resources. section 5.1.1
- Define a reasonable threshold for suspecting denial-of-service abuse on an endpoint or user flow. section 5.1.1
