title: Prevent account owner from accessing EC2 and Redshift
body: <p>One of our customers wants us to process their data in their own AWS account. They will create an AWS id for us and we will create an environment in their account.</p>
  
  <p>We are concerned that they will have access to our code, intermediate
  calculations, database schema etc and our intellectual property (IP) may not be protected.</p>
  
  <p>Our environment consists of a Redshift cluster and EC2 machines running python code. Data is stored in S3.</p>
  
  <p>Are there any steps we can take to prevent the customer from accessing
  our environment even when they own the account?</p>
  
  <p>Encryption will not help because the encryption keys are stored in
  the account itself, which the account owner can access.
  Code obfuscation is another not so good option.</p>
  
  <p>Thanks!</p>