8 Total
2 High severity
6 Medium severity
0 Low severity
Summary

The AWS Acceptable Use Policy establishes prohibited activities across AWS cloud services including storage, compute, networking, and AI products. The policy authorizes AWS to suspend or terminate customer access to services, including without advance notice, upon determination of a policy violation. The policy applies to all customers and end users of AWS infrastructure.

Technical / Legal Breakdown

This document is the AWS Acceptable Use Policy (AUP), which governs permissible and prohibited uses of Amazon Web Services cloud infrastructure, products, and services by all customers and their end users, operating as an incorporated component of the AWS Customer Agreement or applicable service terms. The policy states that customers may not use AWS services for illegal, harmful, or abusive activities, and enumerates specific prohibited categories including illegal content distribution, security violations, network abuse, email and messaging abuse, and violations of AWS's other policies such as the AWS Responsible AI Policy. The policy reserves to AWS the right to investigate suspected violations and to suspend or terminate access to services, up to and including account termination, without prior notice in certain circumstances, which represents a unilateral enforcement mechanism with significant operational implications for businesses dependent on AWS infrastructure. This document engages the FTC Act regarding unfair or deceptive practices, CFAA and equivalent statutes regarding computer fraud and abuse prohibitions, CAN-SPAM Act and equivalent email regulations, and export control regimes including OFAC sanctions and EAR; applicable law in specific jurisdictions, including EU member states and the UK, may impose additional constraints or procedural requirements on how AWS exercises its enforcement and termination rights. Compliance teams operating under GDPR, the EU Digital Services Act, or sector-specific regulations should evaluate how AUP-based service suspension interacts with data access continuity obligations.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 2 provisions
Medium — 6 provisions

Monitoring

Amazon has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Customer Liability for End-User Conduct and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CFAA
United States Federal
View official text ↗
DMCA
United States Federal
View official text ↗
DSA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:03 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000028
Version ID CA-V-000641
SHA-256 81a5b31fdec6cb285a2169be6e946476749b9f851b29b39f7e57892fb401ad7b
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans