This could only lead to a hostile work environment. The process and checks in it is what needs to be questioned. If it came out it was an executive bypassing process, then yes. Otherwise the process can be updated and improved. It also needs to be publicly disclosed why it happened given the nature of the claims.
Not sure if the UK is similar to where I lived, but they were the worst “cloud” provider I’ve ever used. Want to shut down the instance you had to recreate it with a different OS? Good luck getting it back online as they are out of capacity. Also, if you accidentally deleted one of the default network components it was impossible to recreate it without incurring a cost kind of going against anything you learned about cloud computing and “infrastructure as code”. It was a glorified GUI.
Edit: I’m just glad my current employer does not use anything oracle as their support is also famously bad.