If you see someone violating AWS's rules, you must tell AWS about it immediately and help AWS address the problem — and anyone can report violations using AWS's online abuse reporting form.
This analysis describes what Amazon's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes AWS's procedural requirement for users to actively participate in compliance monitoring and violation remediation, creating an operational duty for account holders to facilitate investigation and correction of alleged violations.
AWS customers who discover that someone else is using AWS infrastructure for illegal or harmful activities have a contractual obligation to report it immediately to AWS, meaning passive awareness of a violation without reporting could expose the customer to their own AUP compliance risk.
How other platforms handle this
You agree not to post, upload, publish, submit or transmit any content that: (i) infringes, misappropriates or violates a third party's patent, copyright, trademark, trade secret, moral rights or other intellectual property rights, or rights of publicity or privacy; (ii) violates, or encourages any ...
You may not use our Services for any illegal purpose or in violation of any laws or regulations. You may not use the Services to send money to sanctioned countries or individuals on government watchlists. You may not use the Services for gambling, illegal drugs, weapons, or any other prohibited acti...
You may not automatedly crawl or query the Services for any purpose or by any means (including, without limitation, screen and database scraping, spiders, robots, crawlers and any other automated activity with the purpose of obtaining information from the Services) unless you have received prior exp...
Monitoring
Amazon has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Reporting. If you become aware of any violation of this Policy, you will immediately notify us and provide us with assistance, as requested, to stop or remedy the violation. To report any violation of this Policy, please contact us at https://aws.amazon.com/forms/report-abuse.— Excerpt from Amazon's AWS Acceptable Use Policy
(1) REGULATORY FRAMEWORK: The affirmative reporting obligation in this provision aligns with mandatory reporting requirements under 18 U.S.C. § 2258A (NCMEC CyberTipline reporting for CSAM by electronic service providers), GDPR Art. 33 (72-hour data breach notification to supervisory authorities), and NIS2 Art. 23 (incident reporting obligations). For financial services customers, FinCEN Suspicious Activity Report (SAR) obligations under 31 U.S.C. § 5318(g) may intersect where violations involve financial fraud. The 'immediately notify' standard is more stringent than GDPR's 72-hour window, potentially creating conflicting timelines. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The provision establishes AWS's procedural requirement for users to actively participate in compliance monitoring and violation remediation, creating an operational duty for account holders to facilitate investigation and correction of alleged violations.
AWS customers who discover that someone else is using AWS infrastructure for illegal or harmful activities have a contractual obligation to report it immediately to AWS, meaning passive awareness of a violation without reporting could expose the customer to their own AUP compliance risk.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amazon.