The question is this: can I, as a 3rd party, deploy my software into a customers AWS account and not allow them any access the resources that need to be provisioned for them? So for instance, can I provision some number of EC2 instances and not allow them any access?
The question arises from a desire to protect our IP from being divulged by virtue of the source code being easily readable by the customer. So license agreements aside, there is the chance that IP is compromised, which at this stage in the life of the business could be very commercially harmful.
I've been trawling questions on related topics, as well as the AWS documentation but to be honest I'm not seeing a clear way forward.
Any thoughts would be greatly appreciated.