Resource exhaustion

Requests that are individually valid can be ruinous in aggregate.

A search that is expensive to run, an export that builds a large file, a query that expands. Each one is legitimate, so nothing looks like an attack, and a few thousand of them consume the compute, the memory or the database. Limits by cost rather than by count are what address it.