Proactive Attack Surface Management for AWS Workloads with Amazon Inspector and SentinelOne