17 AWS security issues I spot in almost every infrastructure audit

Root accounts without MFA, databases open to the internet, 900-day-old access keys. These are the 17 issues I spot in almost every AWS audit.