> Meanwhile (and you might have noticed me asking for AWS help on fedi) we contacted AWS as the source IP was from an AWS network. It was very important however to make sure the AWS support did not shutdown access.
I'm legitimately impressed that whoever got that ticket on AWS side actually followed through and was able to divert from their script...
Ditto. My experience with AWS support has been generally disappointing.
When AWS suspects malicious usage in my experience they usually ask before shutting you down.
The company I work at got one of these emails from AWS. We had a bug which caused us to hit a 3rd party API much more than we should have, and the service provider reported us to AWS for attempted DDoS. AWS just asked us to give our side of the story. I'm sure that being a large (but not enterprise) customer gives us some leeway, but I've also heard similar things from hobbyists.
There are exceptions if you are a fairly new account, or if you operate in certain low reputation regions. Specifically I have heard regions in Africa tend to get the "shoot first ask questions later" treatment from AWS Support.
However, all of this was before 2026 (when AWS Support seems to have 100% turned over to AI). For all I know their actions might look completely different now.