If you see someone violating AWS's rules, you must tell AWS about it immediately and help AWS address the problem — and anyone can report violations using AWS's online abuse reporting form.
The obligation to report known violations — not just refrain from violations yourself — creates an affirmative duty that most users may be unaware of, and failure to report a known violation could itself constitute an AUP breach.
AWS customers who discover that someone else is using AWS infrastructure for illegal or harmful activities have a contractual obligation to report it immediately to AWS, meaning passive awareness of a violation without reporting could expose the customer to their own AUP compliance risk.
How other platforms handle this
If you believe that your copyrighted work has been copied in a way that constitutes copyright infringement and is accessible via the Services, please notify Snap's copyright agent as set forth in the Digital Millennium Copyright Act of 1998 (DMCA). For your complaint to be valid under the DMCA, you ...
You must be at least 18 years old, or the minimum age required to use our Services in your location, whichever is higher.
Certain products and services may be sold on Shopify only with prior written approval, including but not limited to: tobacco and e-cigarettes, certain firearms and accessories that are otherwise legal, adult content and services, certain financial services and money transmission, and pharmaceuticals...
This clause could change without notice.
Get alerted when Amazon updates this policy — with plain-language summaries and severity ratings.
(1) REGULATORY FRAMEWORK: The affirmative reporting obligation in this provision aligns with mandatory reporting requirements under 18 U.S.C. § 2258A (NCMEC CyberTipline reporting for CSAM by electronic service providers), GDPR Art. 33 (72-hour data breach notification to supervisory authorities), and NIS2 Art. 23 (incident reporting obligations). For financial services customers, FinCEN Suspicious Activity Report (SAR) obligations under 31 U.S.C. § 5318(g) may intersect where violations involve financial fraud. The 'immediately notify' standard is more stringent than GDPR's 72-hour window, potentially creating conflicting timelines. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Don't miss changes to this clause.
Amazon has updated this policy before. Get alerted on the next change.
Watch AmazonThe obligation to report known violations — not just refrain from violations yourself — creates an affirmative duty that most users may be unaware of, and failure to report a known violation could itself constitute an AUP breach.
AWS customers who discover that someone else is using AWS infrastructure for illegal or harmful activities have a contractual obligation to report it immediately to AWS, meaning passive awareness of a violation without reporting could expose the customer to their own AUP compliance risk.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Amazon.