- Newest
- Most votes
- Most comments
Hello.
Am I correct in understanding that the network configuration has not been changed at all since it was working properly?
note: this application was working before and it stopped working all of a sudden. And we received a mail from AWS for abuse report on this day. but we cannot find any activity which could have triggered any attack.
I believe there's a strong possibility that some of the AWS account's usage has been restricted due to the aforementioned unauthorized access issue.
In this case, you will need to contact AWS support and request that the restriction be lifted.
When you received the notice from AWS Trust & Safety, it's likely that it included which resources were being blocked.
Once you identify and remediate the issue, you can reply back to the email (to: trustandsafety@support.aws.com). I suggest letting them know at least some basic information:
- I what you investigated
- what was found
- how it was mitigated, remediated, and ultimately resolved
- then what's been done to address the root cause to avoid recurrence
Also, I suggest you include an explicit request that the block be removed. I expect that you'll hear back within 1 business day.
However, if you are not aware of an issue and can't confirm that there is an issue and believe it to be a false alert, I suggest your reply include details of your investigation, to show your thoroughness.
