The trick seems to be having sufficiently uninformed people in all positions that might get to write that kind of response. No need to feign ignorance when you can have the real thing.
https://aws.amazon.com/blogs/security/setting-the-record-str...
Not saying he's not lying but it definitely raises the stakes.