Amazon GuardDuty promises additional security with no resource overhead

Bare metal on the Amazon cloud could make hybrid implementations less compelling 

AWS Shield protects against 96 percent of DDoS attacks, Advanced version can take care of the rest for a fee