How a subtle configuration can result in your AWS log data being encrypted with a key that’s not yours.