I really like this, but it makes me nervous to use it in a production environment. I think if you market it as a recommendation engine instead of automatic deleter, it will be more appealing.
Separate question: If I put an Elastic Beanstalk application on the allowlist, will the app protect all related resources (load balancers, EC2 instances, VPCs, etc)?