> the supposed hacker was the goddamn Unifi Head of Cloud, using the access keys needed to do their job
If this comment from a former employee is correct then no, he had root access to a bunch of stuff for no good reason and their security stance is abysmal.
Nobody should have the root aws tokens. They should be split between two teams and stored in a safe & access should go through another method that is audited