(sorry for the late reply) You can't guarantee that AWS is doing. You have to belive it. That's why hospitals & co keep the data in their own servers. And, if

(sorry for the late reply) You can't guarantee that AWS is doing. You have to belive it. That's why hospitals & co keep the data in their own servers. And, if in the cloud, they try to avoid US companies as much as they can. the username if not directly linked to someone (e.g., not an email) usually does not fall into personal data. But, since many usernames are reused by people they may identify the person. This is a a case which, honestly, i would not know how to deal with. I'll try to get an answer.