ELB Data Processed charges for DDoS UDP or SYN flood traffic

The ELB data processed relates to legitimate TCP traffic passed by the load balancer. This excludes the most common infrastructure attacks, like UDP floods and TCP SYN floods. Also, customers are not charged for ELB scaling that happens automatically and transparently to help deal with these attacks.