As part of #621, we can add some custom instrumentation to the
generation of advisories for AWS infrastructure.

This could be split into separate commits, but is not worthwhile.