I think that is what's happening. They would have no other way to identify my app and my AWS credentials otherwise.