mitigation for AWS security misconfiguration