> but the complexity of AWS permissions I'm probably the last person who will defend many of Amazon's design choices, but this is really a matter of competence

> but the complexity of AWS permissions I'm probably the last person who will defend many of Amazon's design choices, but this is really a matter of competence. Internet engineering is hardly unique in having difficult to understand/operate professional tools. While I will feel sympathetic towards someone who hurts themselves with power tools, you blame the tool when it malfunctions, not when the operator ignores basic safety. Bottom line: this firm is incompetent to operate the tools they chose to use. Worse, they value the private data of their victims so little that they couldn't be arsed even to perform trivial sanity checks. I wouldn't trust an outfit like this with the time of day.