Our company AWS account (Account ID: 0582-6449-5999) has been suspended for more than 3 days due to a suspected suspicious activity flag. All console access (including root sign-in) is blocked with the message:
"Authentication failed because your account has been suspended."
Sequence of events:
- We previously received an "Action Required" notice regarding our account (Case ID: ***************) and successfully verified/updated our payment method as requested.
- Despite completing payment verification, the account remains fully suspended — we cannot access IAM, S3, or any other service.
- We opened a critical business risk support case (Case ID: ***************) more than 3 days ago and have not received a substantive response. The case status still shows "Work in progress."
Since the suspension message only references payment-related resolution, but our issue stems from a suspicious activity review (not billing), we're unsure what additional steps we need to take.
Could someone advise on:
- Why account access remains blocked after payment verification is completed, when the suspension may be security-related rather than billing-related?
- What is the typical resolution timeline for suspicious-activity-related suspensions?
- Is there a way to escalate given this is flagged as a critical business risk case with no update in 3+ days?
We are on the Basic Support plan. Any guidance on escalation options would be greatly appreciated.
Thank you.
Edit: Removed case ID — Sage A.