How does knowing the AWS username allow you to send a more effective phishing email? Especially if the username is just the user's... name. That's public info.