Careful with moto: it uses Python's context managers to set-up and tear-down the mocking. If you haven't got the right mixture of nesting, yields, etc. then you may end up running tests against real AWS resources (using your default credentials).

For this reason, I don't have any default AWS credentials configured: I always specify an AWS_PROFILE manually when it's needed ;)