aws-observability

No evidence of intentional malware, data theft, backdoors, or obfuscation is present. The material security issue is operational exposure: unauthenticated, unencrypted OTLP endpoints bound to all interfaces. The deployment should bind to localhost when appropriate or enforce network restrictions, TLS, and authentication before exposing these ports beyond a trusted network.