Blurring Boundaries: Risks of AWS SSM in Hybrid Landscapes