Unless they use the cloud merely as storage, the key will have to reside in the cloud for their servers to do anything useful. So the data is never really encrypted to the cloud provider.

I am not saying that the Amazon board will authorize a change in strategy to dig into every customer data. But if I believed that companies internal audit were enough to prevent fraud, there would be no need for a banking regulator for instance.