DEV-TOOLSMarch 19, 20261 min read12 views

Ask HN: AWS account restricted 18h despite remediation (Case 177385077300217)

Startup Qcart is facing a total production outage after AWS restricted their account due to an exposed CircleCI key. Despite immediate remediation and credential rotation, the team has received no human response from AWS Trust & Safety for over 18 hours.

Our startup (Qcart) is currently facing a 100% production outage across multiple countries. AWS Trust & Safety restricted our account 18 hours ago due to an exposed circleci access key.

Timeline:

18+ hours ago: Received notification of exposed keys (linked to a circleci-eb user).

We deleted the IAM user and all associated keys. Confirmed remediation in the support case.

Current status: Total silence. Support agents keep saying "the specialized team is looking into it," but we have had zero updates while our business is dying.

We have already rotated all credentials and verified that no other unauthorized access exists. We are a small team and this 18-hour delay with no human response from the security team is devastating.

Does anyone at AWS have advice on how to get a human to actually review a resolved security flag?

Case ID: 177385077300217

Any help or visibility is greatly appreciated.

Source: Hacker News

More in this category

dev-tools

HomeLab #1: MikroTik as a Home Router

A comprehensive guide on setting up a MikroTik router for a home lab, covering ISP configurations, PPPoE, MAC cloning, and PoE access point setup.

dev-tools

Bananas sprout in Rayleigh Garden UK after 15 years

Rising temperatures due to climate change are transforming British gardens, allowing tropical plants like bananas to flower and fruit. After 15 years, a couple in Essex was astonished to see their banana plants finally bear fruit following a recent heatwave.

dev-tools

The death and rebirth of my home server

A sudden power outage delivered the final blow to a long-running Raspberry Pi home server's microSD card. This article details the process of rebuilding the server using NixOS, minimizing disk writes, and repurposing old HDDs into a Btrfs RAID1 pool.

dev-tools

What I learned selling 2,500 MIDI recorders: Hardware is not so hard

A software engineer shares his journey of launching Jamcorder and selling 2,500 units, debunking the myth that hardware is inherently difficult and offering practical tips for hardware startups.

dev-tools

Token Plan Upgraded: Individual Plan Launched, Team Plan More Affordable with Qwen 3.8 Max Preview

Token Plan has upgraded its offerings, introducing a new Individual plan and lowering prices for the Team plan. Users can now access advanced models like Qwen 3.8 Max Preview with unified access to text, vision, speech, and image generation.

dev-tools

Qwen3.8 is launching and going open-weight soon

Alibaba is set to launch Qwen3.8, a massive 2.4-trillion-parameter AI model that will soon be open-weight. A preview version, Qwen3.8-Max-Preview, is already available for early testing on Alibaba's platforms.