I tend to agree, the trust I have in Amazon around handling my information security is quite limited - I mean that goes for a lot of cloud providers, but Amazon just doesn't seem like an organization that cared much about data protection. I once submitted a couple of bugs to them and wanted a CVE, but only thing they said is. Thanks you, we fixed it but we won't acknowledge any of this externally via CVE, because well, it's the cloud, we don't have bugs or something along those lines.