How Amazon Web Services Uses Formal Methods – Communications of the ACM