The same thing happened to my brother. He's been teaching himself software development for a while, and learned the same painful lesson about securing your key

The same thing happened to my brother. He's been teaching himself software development for a while, and learned the same painful lesson about securing your keys. This was despite the things he did right, like: 1. Used IAM roles (but he didn't lock down it's permissions nearly enough clearly) 2. Used two factor authentication. http://snaketrials.com/2014/11/11/espionage/ http://snaketrials.com/2014/11/11/espionage/ http://snaketrials.com/2014/11/12/espionage-update/ http://snaketrials.com/2014/11/12/espionage-update/ I should note Amazon forgave the money his account owed, given it was his first time making this mistake on their systems. Amazon told him the servers were probably being used to mine bitcoins. edit - Oh, and on his blog he says it was $2000 over 12 hours. It turned out to be $5000 over 2 hours!