So the problem is not with AWS but with the devops on client end who manages AWS. This in not an technical problem. If you didn't protect your cloud resources properly, you will be hacked and data will be held for ransom.