&gt; The fact that AWS keys can be used to access S3 is expected behavior and would not be considered a security flaw in itself.<p>Isn&#x27;t it a security flaw that a single AWS key was able to access all of Instagram&#x27;s data?