I think he's assuming that since the CIA is now a big customer, Amazon will bend the rules and give the CIA access to data from other customers, or at the very least the CIA will now have better experience in how AWS works so they'll be able to attack AWS customers more effectively themselves.