You could, however, spin up or down EC2 instances associated with that account. You could easily destroy a business with this information, or bankrupt a person (well, Amazon is usually pretty good about forgiving accidental charges, but imagine explaining to them how someone got your credentials).