According to the article the security flaw was just that the DB was not secured with any password. There could be a legitimate reason for that and it's not a fl

According to the article the security flaw was just that the DB was not secured with any password. There could be a legitimate reason for that and it's not a flaw in the technology, so it's really not something AWS should be doing something about (other than maybe reaching out to the user to confirm that the lack of password is intended). Honestly, I would be a little worried if AWS saw that a user had a DB with no password and decided to either add a password or block access to the DB without the user's consent.