10 Total
3 High severity
7 Medium severity
0 Low severity
Summary

This is the AWS Service Terms document governing your use of Amazon Web Services, including Amazon Bedrock, the platform AWS provides for accessing and building with foundation models and generative AI tools. The terms state that you may not use outputs from Bedrock models to train or improve competing AI models, and that AWS may modify or discontinue model availability with notice, which affects what AI capabilities you can access and how you can use the results. If you use Bedrock to process personal data or operate in regulated industries, the compliance obligations for that data use remain with you as the customer under the AWS shared responsibility model.

Technical / Legal Breakdown

This document constitutes the AWS Service Terms, which govern use of Amazon Web Services offerings including Amazon Bedrock, and operates as a supplement to the AWS Customer Agreement or equivalent enterprise agreement establishing the overarching legal relationship between AWS and the customer. The terms authorize AWS to process customer content submitted to Bedrock services, impose use restrictions including prohibitions on using Bedrock outputs to train competing foundation models, and establish that model providers whose models are accessible through Bedrock may have additional terms governing their specific models. The Bedrock-specific provisions include explicit restrictions on reverse-engineering foundation models, using service outputs to build competing AI model services, or circumventing safety mechanisms built into the models, which are operationally distinct from general-purpose cloud service terms in that they extend restrictions to AI model outputs and derived works, though the practical enforceability of restrictions on model output use may be subject to applicable copyright and fair use frameworks depending on jurisdiction. The document engages the EU AI Act and associated conformity obligations for high-risk AI system deployments, GDPR and CCPA frameworks where personal data is processed through Bedrock inference endpoints, and sector-specific regulations such as HIPAA where customers deploy Bedrock in healthcare contexts, with compliance obligations for sensitive data processing falling primarily on the customer as data controller rather than on AWS.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

1 important change detected

3 versions captured · Last updated: May 2026

May 9, 2026

medium
What changed AWS Bedrock added a new service section for Amazon Bedrock AgentCore Payments, which enables developers to build payment solutions that route transactions between AI agents, third-party wallet providers, and sellers. The updated terms explicitly state that AWS does not provide regulated financial services, does not hold customer funds, and is not responsible for wallets, private keys, or wallet provider services. Developers using this feature are solely responsible for regulatory compliance, transaction monitoring, security safeguards, and any resulting disputes or payment liabilities.
Why this matters This change introduces a new optional service feature rather than modifying existing consumer rights or obligations. AWS explicitly disclaims providing regulated financial services, holding custody of funds, or bearing responsibility for wallet providers or transactions. Developers who elect to use AgentCore Payments must comply with applicable financial regulations, implement their own security safeguards, and accept full liability for transactions and disputes. The terms do not impose obligations on end consumers using AI agents; the obligations fall on developers integrating the service.
View full change record →
High — 3 provisions
Medium — 7 provisions

Monitoring

AWS Bedrock has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Acceptable Use and Prohibited Applications and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CFAA
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 11, 2026 21:20 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000648
Version ID CA-V-002471
SHA-256 4dcabacdcf7c86028073d93a6e9b79d29db7a3373e23524a25b59e429fa1b86f
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans