awscli: better sandboxing

Closes #34224.
awscli: update 1.6.2_1 bottle.