2 questions.
1) Who stands to gain from doing DDOS attacks? Either the business competitors who wants to put you out of business or the "protectors" themselves (so they can sell their DDOS protection service"??
2) Can you use AWS services to launch DDOS attacks?