She was a AWS insider. Aware of the common env configurations should have in place and aware that Capital had a few places to poke here and there.
I hardly call this a hack. This is more a cake recipe she followed thanks to working directly on AWS and being a crook.