Hey 👋 I've been making my way through the guide (pdf) & have a couple of questions. 1: I need some help with the intuition of when to create a new stack file, for example, if I was to use something like planetscale, which is an API for a database, do I put the relevant bits in a storagestack or an apistack? 2: How do we defend against a denial of wallet attack, when someone maliciously sends lots of requests to one of our endpoints/lambdas

1. My guidance would be: when in doubt, create a new stack. When persistence, ALWAYS stick in its own stack.

re 1. there’s probably nothing to add to your stack from an infrastructure perspective for PlanetScale, except possibly an environment variable with a path to the connection string in SSM

2. Various strategies here, and depends heavily on what kind of API you choose. More globally, the answer to your question is AWS WAF/AWS Shield.

Thanks both