TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Tell HN: Locked out of AWS with no recourse

7 pointsby scottmasalmost 2 years ago
Thought I&#x27;d just leave my personal AWS story here for you all as a cautionary tale.<p>So I inherited this old project at work that&#x27;s basically been put on ice. It had its own AWS account where we managed all things related to the project. Aside from occasionally verifying that the service was working as expected, basically nothing was required from me.<p>About a month ago, someone in accounting killed the credit card that was paying for all the services on this account unbeknownst to me. Obviously, this was a big screw up by us, but whatever. When stuff like this happens usually, it&#x27;s not too big of a deal because SaaS providers usually will send notifications that the charge failed to process. Not so with AWS. We received no notification - nothing.<p>So it just so happens that at the exact time our payment failed to process, our domain name came up for renewal on Route 53. Since our payment credentials were invalid, our domain failed to renew. So all DNS requests to the domain, including all emails, just get dropped now since DNS can&#x27;t resolve.<p>Eventually, it came to our attention that the service was down and the payment credentials were invalid. No big deal - it&#x27;s a temporary interruption of service on a tool that hardly anyone uses.<p>Here&#x27;s where the kafkaesque scenario unfolds. When I go to login at AWS with the root account, I&#x27;m presented with a MFA challenge to enter the code emailed to my account. However, since our DNS has expired, I can&#x27;t receive the email. I can&#x27;t login to AWS because our email is down due to DNS. But I can&#x27;t fix our email because I can&#x27;t login to AWS.<p>Once I figure out what&#x27;s happening, I reach out to support. A low level outsourced offshore IT worker answers the phone who literally doesn&#x27;t even understand what DNS is. She requests my &quot;the name registered to my account&quot; which I do. But apparently the name I provide is incorrect. No one in our company knows what the name might be, since it&#x27;s actually an admin account, not an account owned by an actual named person. I get that she&#x27;s trying to keep out scammers, etc, but she just keeps repeating ad infintum the same thing. I ask to be transferred to her manager, upon which she transfers me to the Amazon consumer division and the CSR has zero idea of what I&#x27;m talking about.<p>Next I try to wade through an impenetrable maze of various forms and contact numbers. After submitting a bunch of forms, I finally get someone on the line who seems to be an American and understands the concept of DNS. However, she can&#x27;t help me, and tells me to fill out yet more forms. I fill those out and provide all the details of the case in the form. I get a stock response saying they can&#x27;t help me along with links to the same forms I was originally directed to.<p>And that&#x27;s where I&#x27;m at. As far as I can tell, there&#x27;s no way out of the Kafkaesque hamster wheel I find myself in. If anyone has some ideas for how I can find a way out of this situation, I&#x27;d love to hear it.<p>So anyhow, be warned ya&#x27;ll.

8 comments

intesarsalmost 2 years ago
I had the same experience with Azure. One of our VM was infected with some kind of malware that activated huge bandwidth consumption. Azure slapped us with $8K and in addition they closed our account. Claiming that we did some suspicious activity. This is so ridiculous. It took us months to explain and convince them that it&#x27;s not our fault. Eventually they negotiated half of the payment with us. Luckily we weren&#x27;t running our production on Azure. Imagine our production going down and not able to access our data.
mattlalmost 2 years ago
<a href="https:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;Route53&#x2F;latest&#x2F;DeveloperGuide&#x2F;domain-restore-expired.html" rel="nofollow noreferrer">https:&#x2F;&#x2F;docs.aws.amazon.com&#x2F;Route53&#x2F;latest&#x2F;DeveloperGuide&#x2F;do...</a> -- don&#x27;t know if this is anything you&#x27;ve not tried, but it does seem like there&#x27;s a way to make a case there for this specific issue.
评论 #36635099 未加载
thaynealmost 2 years ago
It&#x27;s too late too late for this to help you now, but a lesson to learn from this is it&#x27;s probably a good idea not to have the admin email for an account tied to a domain that is managed by the same account.
tlbalmost 2 years ago
It might be quicker to create a fresh AWS account and push everything there.
评论 #36634845 未加载
rhatexeralmost 2 years ago
&gt; Obviously, this was a big screw up by us, but whatever.<p>Agreed. Don&#x27;t be too harsh on yourself. Write blogs, testimonials and HN posts blaming Amazon. They are the ones responsible for this.
znpyalmost 2 years ago
As with any vendor… you shoukd always get a representative assigned to your company.<p>In your case (aws) that would be a technical account manager (a tam in aws speak).
评论 #36634859 未加载
joshxyzalmost 2 years ago
I&#x27;m honestly wondering how did you hosted them mail services of your root account in your same root account.<p>Like, at that point there&#x27;s really zero recovery chance at all. Annoying yes but hilarious at the same time.
uptownfunkalmost 2 years ago
Ah what happened to good ol&#x27; customer obsession AWS