A team of students has been assigned the task of creating and managing a volunteering activities platform . They have decided to deploy the website in the cloud, on Amazon Web Services. However, the students are not cloud security experts and therefore struggle to implement effective security measures for their web application. Moreover, personal data about the people offering or requesting their service is stored there. 

Aware of the situation, the team seeks some help in figuring out how to improve their system to prevent any actual damage.    

Can you identify misconfigurations and vulnerabilities in their project, and teach them how to better secure their cloud application?