AWS misconfiguration mitigation