"...told me that engineers at Amazon were generally forbidden from using AWS due to security concerns."
The opposite is the case: there has been a huge push for some time to move (significant) parts of Amazon retail to AWS. It's extremely complex and service quality is paramount, so it takes a while to make it all happen.