Root user cannot start LightSail instance after possible unauthorised access

Question

My AWS root account was compromised at the start of Sep and I reset my password. I was getting a sitemap.xml that was pointing to random Chinese sites. I tried a few things and tried to restart of Lightsail Wordpress instance and it gave me a 403 unauthorised error. I tried stopping which was successful but Im unable to start the instance with my root user or my other iAM account which has full access to Lightsail. I saw a similar issue with someone else who required AWS to unlock something on their account.

My website is down so this is urgent. Ive lodged a support ticket too but it doesn't allow me to log a technical support request as Im on a basic account.

Answer

Hello.

Unfortunately, re:Post is a community site, so we users cannot solve problems in our AWS accounts.  
I think we will have to wait for an answer from AWS support.  
If you have opened a case with AWS Support under "Account and billing", please wait for their response.  
https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

Root user cannot start LightSail instance after possible unauthorised access

Relevant content