Fooled us too
We only use AWS for nonessential services. Our site works fine even when blocking all 3rd-party crap via uMatrix. I thought we were safe.
Nevertheless, our whole site was borked by a plugin loading an unused 3rd-party JS file, which WAS being served, but only the first ~1k of it.