awscli: better sandboxing
awscli: update 1.6.2_1 bottle.