fix(security): harden Bedrock regions, query merges, and upload errors (#2410)