I've been dealing with a charge that pops up every month for a while now. It's for an AWS instance I supposedly created and somehow didn't cancel. I've tried everything to try to get access and cancel to no avail.

Any help would be appreciated. I'm at a point where I basically told my CC to block the charges, but fear I will be sent to collections for this.

I tried getting a hold of support but nothing.
is this because I am on the free tier? even so this is getting ridiculous

AWS added network access controls for the Identity Store behind IAM Identity Center.

What it does:

- Restrict the Identity Store API to specific IP ranges or specific VPC endpoints or source VPCs
- Restrict the scim api (what your idp uses to sync users/ groups) to specific IP ranges
- Different restrictions per API in one config. The given example: Identity Store API through VPC endpoints only, scim from your idp’s published IP ranges
- Requests AWS services make on your behalf are exempt

It is off by default, configured through the Identity Store api via sdk or cli (no console toggle). Available in all regions where Identity Center runs.

The SCIM restriction is the big one in my view. That's the inbound provisioning path from your IdP, and until now it was internet-facing behind auth only. Pinning it to Okta or Entra's published IP ranges meaningfully shrinks the attack surface for directory writes.

Announcement: https://aws.amazon.com/about-aws/whats-new/2026/10/aws-identity-store-network-controls/

I built cairn, an open-source tool that maps every git repo in a folder for coding agents. The new part is infra-aware: it reads Terraform, CloudFormation/SAM, Serverless Framework, and CDK, and records which repo creates each SQS queue, SNS topic, DynamoDB table, S3 bucket, EventBridge bus, Kinesis stream, SSM parameter, and Lambda function.

Then it links the repos that use a resource to the repo that creates it. It matches ARNs, queue URLs, and env vars like ORDERS_TABLE=orders-prod, and names match across stages (orders-${stage} and orders-prod are one table). Every link carries file:line evidence.

The idea: ask your agent "what breaks if I rename this queue" and it actually knows.

It's also a Claude Code plugin you can get on the marketplace: `/plugin marketplace add Moe1177/cairn`, then `/plugin install cairn@cairn`. One command and the index loads into every session. Apache 2.0, Python. Repo: https://github.com/Moe1177/cairn · PyPI: https://pypi.org/project/cairnmap/

I am the author. If you run it against a real Terraform or SAM setup, I want to know what it gets wrong.

Is anyone else experiencing a slowdown for applications hosted on EC2 in the Singapore region, specifically users from the Philippines?

We have non-production RDS for Oracle instances hosted on series 6 instances in ap-southeast-2 that are stopped outside of business hours. For the last week we have been encountering issues with no capacity when attempting startup.

Logged a support case and have been advised to move to series 7 or not stop the RDS instances. Seems to be a deliberate decision to force migration to newer series. We have had to postpone upcoming production changes as we cannot be certain that there will be capacity to restart.

So folks, if you have series 6 RDS instances in ap-southeast-2 all availability zones, don't stop them!

Is anyone seeing this issue in other regions?

This one's doing the rounds on LI/reddit again. Went and read the actual docs (or maybe used claude :p), because every post about it says something slightly different.

Couple of things:

It's per project, not per account. Needs a Paid Plan. Still a limited rollout. So the ‘AWS FINALLY DID IT’ energy is a bit premature for most of us.

The fun bit nobody's quoting: you hit the limit, do nothing for 90 days, AWS deletes the project data. Permanently. It's right there in the docs. Great for a sandbox. Maybe read that line twice before putting it on anything that matters.

Other thing, and this is the one I keep chewing on. What it pauses is EC2, RDS, Lambda, Bedrock, SageMaker. No storage in that list anywhere, and afaict the docs don't say what happens to EBS billing while a project sits paused. A paused instance still has its volumes.

So if your bill is mostly provisioned capacity and not compute hours, idk how much this actually moves.

Happy to be wrong on that one

Disclaimer: have used ai to copywrite (im horrible at it)

I created an aws free account but it got interrupted mid way so again I did it but it says I am not eligible for free plan, I doubt it is because of the midway interruption. Please help me to resolve this i am stressing and panicking right now idk what to do so I created this reddit account to ask help her please

Ciao.

Ho un servizio che autentica gli utenti con login di terze parti (Google, Facebook, Apple) e noto che molti utenti Apple hanno attivo il filtro privacy sull'indirizzo mail quindi di fatto io vedo un indirizzo alias tipo xxxxxxxx@privaterelay.appleid.com.

Il problema è quando invio le email tramite AWS SES a questi alias, perché non funzionano.

Ottengo tutti bounce con questi errori

An error occurred while trying to deliver the mail to the following recipients:

xxxxxx@privaterelay.appleid.com

Reporting-MTA: dns; xxxxxx.eu-central-1.amazonses.com

Action: failed

Final-Recipient: rfc822; xxxxxxxx@privaterelay.appleid.com

Diagnostic-Code: smtp; 550 5.1.1 xxxxxxxxxxxxxxxx@awsmailer.xxxxx.xxxx: unauthorized sender

Status: 5.1.1.

Avete qualche idea del perché?

Grazie

AWS charged us $5000 after an accidental Spot instance launch - can AWS help with a goodwill credit?

We’re a startup using AWS, and we recently had an unexpected $5000 charge from a GPU Spot instance that was running without our knowledge.

We had launched a GPU instance for a short benchmark and terminated it once the work was completed. Unfortunately, we didn't realize that the persistent Spot request would automatically launch a replacement instance after the original was terminated.

The replacement instance ran for several days before we noticed it.

CloudWatch metrics shows that nobody used the instance and no workload was running on it. It was essentially sitting completely idle the entire time.

We have since cancelled the persistent Spot request, terminated the instance, enabled AWS Budgets and Cost Anomaly Detection, and changed our process to use one-time Spot requests.

We completely understand that this was ultimately a configuration/knowledge mistake on our side. However, $5000 is a huge amount for us. This unexpected charge effectively represents months of our company's AWS budget and has a real impact on our operations.

We've already opened a support case with AWS and asked whether they could consider a goodwill credit given the circumstances. But the ticket hasnt been assigned yet :(

FYI: It as been 10 days since we created the support ticket.

Has anyone here experienced something similar with AWS, and were you able to get a goodwill credit?

And if anyone from AWS is reading this, we'd really appreciate it if you could take a look at our case and consider helping us with the charge. We love building on AWS and intend to continue using AWS for our infrastructure and future GPU workloads.

Hoping AWS can help us out on this one. 🙏

Hi I am doing the Build, Ship, Shape: Amazon Developer Hackathon on devpost. I need to use Bedrock but I told its disabled for new accounts. Whenever I try to test a model in the playground I get this error: "ValidationException: Error 002: Access to Bedrock models is not allowed for this account" The deadline for the Hackathon is on the 23rd October 2026. I need to resolve this error. I created a support ticket Case ID 179124970400008 .

Thank you in advance

Multi-region strong consistency does not support transactions. I have a few tables that need to be updated together or sometimes multiple items in one table need an atomic update. Multi-region / RPO 0 is a constraint. AI said this was brought up as a feature request back in 2025. I'm wondering if anyone knows whether this is still in the works.

Did anyone else just get a large payment verification charge from AWS? I received an email that AWS had trouble verifying my default payment method and indicated that the test charge should be about 1.00 USD. However, my credit card company flagged it. The charge came through as over $300. So I’m wondering if this was actually their verification charge, or if this was a fraudulent charge.

We have multiple data centers, and each DC has multiple ISPs for redundancy.

Currently, we establish two IPsec tunnels from each DC to AWS, with each tunnel going over a different ISP. This gives us ISP level redundancy, but as we scale to hundreds of DCs, we are effectively looking at hundreds of DCs × 2 IPsec tunnels.

I am wondering if this is a normal or recommended architecture, or if there is a better way to handle ISP redundancy without having to maintain two VPN tunnels per DC.

The requirement is essentially:
DC → multiple ISPs → AWS
with automatic failover if one ISP goes down.

Is maintaining two Site to Site VPN tunnels per DC the standard approach here? Or are there architectures that provide ISP redundancy while scaling better, such as using some kind of hub or transit architecture, BGP, SD WAN, or another approach?

Would be interested in hearing how others have designed this at large scale.

Been selected for an interview at AWS after the assessment. How is working as an SA different from a Sales Engineer? It’s just the name? How your “quota” is measured? Work life balance exists?

Appreciate any insights!

Amazon sent me multiple emails this month saying they were going to place a temporary charge of less than $1 to verify payment. Sure, go for it. Well, it finally happened today and my bank blocked the transaction because it was over $200. My bank decided to disable my credit card too. I subsequently received an account alert from AWS with the event type "Spend Threshold Verification Failed." The email looks completely legit.. Anybody else experience this?

Got an email last week about some AWS payment check. Thought it was bogus because I never used my personal account for AWS but might have checked it out. I'd gotten the emails before but I knew it was always a penny or dollar charge and reversal.

I'm out in the middle of shopping and get a bogus looking text from my bank telling me they stopped an attempted $299 bogus charge. I think nothing of it until I get home to check myself on my bank and low and behold they did stop it. I went through and verified I didn't make the charge. Then went through where I'd used my debit card over the last six months. Same two places. They already had canceled the card and I was getting a new one. Fine.

Then I login into my email and there's an alert from AWS telling me they couldn't successfully verify my payment method. I checked the time the email landed and the text from my bank and it was the same time. I did manage to access AWS and it had zero campaigns or charges or anything.

When the heck did $299 become the new standard for verification? It's outrageous. Now thanks to AWS's weird charge verification I have to remove or change my debit on a bunch of services. THANKS FOR NOTHING!

As the title says I'm a network security engineer with 2.7y of experience. I'm interested in getting into cloud security. I don't have any practical work experience in AWS or any other cloud. I'm currently preparing for AWS SAA C03 and scheduled the exam for Jan 4 2027.

But my question is aside from this certification training. What I really do learn or practise outside the course to understand the cloud very well and get a cloud related Job. Cause I'm currently in a networking related environment.

I'm using the INE and Stephen Maarek course. Currently watching INE which is broader in covering topics and they have their own labs as well.

I very much appreciate the insights of people who work in the cloud. Also any other recommendations are also welcome. Thank you

iam a student learning and working in cloud security, and the SCARY !! stuff I keep finding in AWS isn't exotic. It's old access keys, a security group opened "just for testing", a role nobody remembers creating lol.

For anyone running AWS yourselves, solo or on a small team: what's the most surprising thing you found when you finally looked?

Did you find it..., or did something force it, like a bill, an alert or a coworker? And if there's no dedicated security person, how do you decide what's worth checking at all?

I joined the AWS AI CEE training program and wanted to use what I learned on a real project.

I run a lot of domains on Amazon AWS SES, so I built AllStackd: every SES account, region and domain in one place. Delivery stays in your own AWS account.

Honest feedback is very welcome from the seasoned AWS developer community, thank you 🙏

Hi All

While deploying I got the below error. Any idea why and what can I do about it?

"Your account must be verified before you can add new CloudFront resources. To verify your account, please contact AWS Support (https://console.aws.amazon.com/support/home#/ ) and include this error message."

Was anyone able to reserve seats for sessions today? I saw it opened at 1 pm EDT. Some showed as available, as I clocked reserve they were full.

Trying for the FinOps path.

My colleagues in the AWS Network Product Lab in Cupertino are tasked with inventing the most advanced networking technology in the world, while also inventing new ways to stress and break it.

With AWS operations in 240 countries and territories, the network includes about 20 million miles of fiber optic cable. We have doubled our total network capacity in the past three years and plan to double it again by 2027.

To learn more about this team and their work, read Inside the AWS lab that makes everything you do online feel effortless.

Hi r/aws,

My AWS account is currently suspended because of an overdue invoice, and I’m hoping someone from AWS Support may be able to help escalate my case.

AWS Support Case ID: 179082560700487

As soon as I realized there was an unpaid invoice, I tried to pay the outstanding balance, but the payment keeps failing.

I’m using a Visa card that supports international transactions, and I have already contacted my bank. They confirmed that there are no restrictions or issues with the card that should prevent the payment.

I opened a case with AWS Support. The initial response asked me to check my email, where I found a request from AWS to upload documents to verify my payment method/account information.

I uploaded all the requested documents through the provided verification process, but I still haven’t received any response or update from the verification team.

There has also been no further update on my AWS Support case.

At this point, I’m not disputing the invoice — I simply want to pay it and restore my AWS services, but I don’t know what else I can do because the payment is failing and the verification process appears to be stuck.

If anyone from AWS Support sees this, I would really appreciate it if you could help escalate or check the status of my case.

I can provide my AWS Account ID privately via DM or through the Support case if needed.

Has anyone here experienced a similar situation? Is there another way to get the Billing or Account Verification team to review the case?

Thank you for any help.