AWS publishes which IPs it owns, so scrubbing headers is not enough for secrecy. (Not that doing something that relies on secrecy is a smart plan for a business, anyway.) https://isitonaws.com/
So it sounds easy, but is only usefull for companies with multiple networks. But even then i guess aws is publishing that they handle your networks.