Everything on AWS can deny a request no matter what the API happens to be