I wonder if this is the same service that they use to scan public Github repositories for Secret AWS keys. I'll admit that I've accidentally committed a private key to a public repo before, and I received an email from AWS letting me know about it shortly after.
I suppose that its in Amazon's best interest to not have people hacking accounts and spinning up the maximum amount of EC2s to mine Bitcoins.