Hacker Accessed AWS for $50k+ – AWS Ignoring Me

Re:Hacker Accessed AWS for $50k+ – AWS Ignoring Me by scrollaway on Monday May 10, 2021 @07:11PM (#27112045)

AWS gives you access to a lot of footguns, and they expect you to implement proper security practices, access controls, monitoring, billing alerts, etc.

Why? Because they serve just about every use case and scenario. I've myself spun up $5k/day resources on accounts that did four magnitudes less / day before that. There are some limits by default which you can get raised, but they're not going to prevent a $50k bill - at best, they're here to prevent a $500k one.

Anyway I agree they could make it clearer that you have to do all this crap yourself but it makes for a poor sales pitch.

[ Parent | on HN ]

Re:Hacker Accessed AWS for $50k+ – AWS Ignoring Me by csakon on Monday May 10, 2021 @07:15PM (#27112082)

Footguns...lol. New term for me. I see your point and it makes sense from that perspective. For me as a small business owner, it's very painful considering I tried to go the normal route of opening a case for help and simply cannot get anyone to escalate this or talk to me on the phone.

[ Parent | on HN ]

Re:Hacker Accessed AWS for $50k+ – AWS Ignoring Me by scrollaway on Monday May 10, 2021 @07:29PM (#27112216)

I understand. It's a tough situation. Breathe, AWS is one of the better services to end up in such a situation with. This will get resolved.

Be a little patient, but don't try to superescalate by going through emails and what not. Just file a business ticket. If this needs escalation, they will do so.

[ Parent | on HN ]