Comment by pavel_pt

If that’s all it takes an attacker, you’re doing AWS wrong.