The real question is did you rotate the keys (and do further hardening, I hope!) because of the vuln report Wes made?   If so, than you should be grateful for his work pointing out your mistaken single point of failure via AWS S3 security and you should have rewarded him handsomely.