Hopefully he posts updates about his unanswered questions. Since it sounds like the compromised key should not have been able to create ec2 instances. And I do

Hopefully he posts updates about his unanswered questions. Since it sounds like the compromised key should not have been able to create ec2 instances. And I don't blame him for making that mistake. That kind of bug should have been caught in QA. On the other hand, I'm paranoid enough about things that I wouldn't push unsecured access keys to any server I didn't control. Even if I was paying for a private repo.