Some of this is lack of IT experience in general vs with AWS, and just plain laziness. Still, it's interesting because some of it requires that you actively wo

Some of this is lack of IT experience in general vs with AWS, and just plain laziness. Still, it's interesting because some of it requires that you actively work against AWS to achieve (e.g. publicly accessible RDS). Could be that they gave up on, say, security groups and just found that to be the easiest way to "get it to work" (a frequent overriding directive). In any case, I'd put some of it on Amazon too. Their documentation always struck me as piecemeal and task-oriented; lacking a sense of overall architecture or design. But, I suppose that's what certifications are for.