AWS Shield – Managed DDoS Protection
I've been saying for years that AWS has secret DDOS protection.  Never confirmed, but I'm pretty sure the basic level is just them admitting that they've always had that service.