> If Amazon is peeking into corporate customers' data, then there have to be mechanisms designed to allow that, a whole bunch of people know, it's part of engineering designs, and a whistleblower is going to leak it to the press

An awful lot of this sort of thing in the corporate world is based on pinky-promises and legal threats, more than on robust technical controls.

Every production system I have ever seen has at least one set of dev-accessible keys that has access to the production DB. Mature systems at least had audit logging around who retrieved those keys, less mature systems often didn't have any kind of internal access logs.

Is "Amazon the corporate entity" snooping on your data? Absolutely not. Is someone with Amazon internal access snooping on your data? You'll never know either way.