I checked lambdaguard and komiser and cloudwatch and cloudtrail - I see no suspicious logins, no resources in strange places, our IDS didn't pick up anything, and all the APAC regions are disabled, and there's nothing in them. So it's not like we were suddenly hacked as far as I can tell.