They stole is ROOT credentials. This is not about sneaky AWS, this is about a hack. There is not much you can do if someone gets root access to your system. S

They stole is ROOT credentials. This is not about sneaky AWS, this is about a hack. There is not much you can do if someone gets root access to your system. Setting up a billing alert to notify you your aggregate cost exceeds a certain limit takes about 90 seconds. I don't understand the overwhelming friction to the AWS billing tools in this thread.