https://lamport.azurewebsites.net/tla/formal-methods-amazon.... mentions bugs found across S3,EBS,DynamoDB.

A few other references:

- https://gist.github.com/MattPD/71b63a3e1600c2b52e1db80fa2834... (Formal Methods and Program Analysis in Industry, has lots of links on other industry usage)

- https://d1.awsstatic.com/Security/pdfs/One_Click_Formal_Meth...

- https://d1.awsstatic.com/Security/pdfs/Continuous_Formal_Ver... (Coq, not TLA+)

- https://aws.amazon.com/security/provable-security/