It is not a bad idea. Amazon has more at stake because a compromised token is going to lead to someone doing bad things with AWS and probably running up a huge bill that Amazon will have to stick the customer with, annoying the customer, or simply eat the cost.