Kiro's IP detection for reverse proxies is very strict; balanced mode randomly distributes requests across different accounts, causing multiple accounts to be associated with the same IP in a short period, which very easily triggers risk controls