Anyone running anything remotely serious on AWS should have 2 factor auth enabled I hope