> using their internal access to target vulnerabilities in customer AWS setups

citation needed