Why Your AWS Security Strategy is Secretly Costing You a Fortune