Anyone that has production AWS creds in the same operating system they randomly execute unreviewed code on the internet on should have their access revoked.