First thought, isn't this a tad dangerous for the supplier? There seems to be nothing stopping me from using huge amounts of bandwidth just to screw with them. Or if I really was a bad guy, how much of an effective dos attack could be launched on ec2 hosted sites in the same az from these servers?