I was in a big data program at college & a prof gave an assignment to spin up a single node Hadoop cluster on EC2. No one but me had cloud experience. The prof told them it wouldn’t cost them anything, but I taught everyone how to set up billing alerts, which went off a day later
A concrete example of how AWS creates friction:
"I want to try Postgres on RDS"
Create an instance, use many of the defaults (including the default security group) and try to connect from a DB client.
Connection times out.
Spend 30 minutes reading the docs, StackOverflow, and more to finally find out that I need to adjust the default security group or create a new one with the appropriate inbound rules.
Nowhere along the process of creating the instance does it say something like "heads up! you won't be able to connect to this instance with the current SG settings".