Many are speculating that this will not be fixed by AWS (by design) however now that this has been discovered AWS will "need" to repair this flaw or they will start incurring customer flight to more secure or cheaper services.
The question is more about how long AWS are going to take to fix this issue and how many DDoS bills will they forgive.
The question is more about how long AWS are going to take to fix this issue and how many DDoS bills will they forgive.