[yeukhon]

Yes. AWS actually does scan on a regular basis. They have caught some before any harms done. I don't know how often though.