The terms prohibit using Bedrock to generate illegal content, content that could facilitate weapons development, or content that sexualizes minors, among other harmful categories.
This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These restrictions define the outer boundary of permitted Bedrock use cases and carry account termination risk for violations; organizations providing Bedrock-based services to end users must ensure their downstream use cases comply with these restrictions.
The updated terms now explicitly state that AWS IoT SiteWise Scenario Discovery is not designed for real-time vehicle control and cannot be used as the sole basis for determining vehicle safety or regulatory compliance. Organizations deploying this service must implement independent human monitoring and safety validation before using its outputs to support vehicle system decisions. The terms make clear that AWS assumes no responsibility for uses that violate these constraints.
View change record →The updated terms establish new restrictions on how AWS Capacity Reservations may be used. Specifically, customers purchasing On-Demand Capacity Reservations can no longer resell them to other parties, and AWS reserves the right to cancel the purchase or terminate running instances if the company suspects resale activity. For Capacity Blocks for ML, the grace period before instance termination increased from 30 minutes to 60 minutes for UltraServer instance types, allowing slightly more time to complete workloads. The Amazon Sidewalk qualification program was renamed and simplified, but the underlying security and operational requirements remain in effect.
View change record →The updated terms establish a formal framework for AWS Bedrock's free exploration services, clarifying the operational boundaries and responsibilities. AWS reserves the right to discontinue these services at any time without prior notice, meaning customers cannot rely on their continuation for production planning. Customers are solely responsible for testing, deploying, and maintaining any code, documents, or AI solutions AWS provides, including determining whether those solutions comply with applicable law. AWS retains the right to develop competing products based on content it creates during these engagements, though this does not override existing non-disclosure agreements. Customers are prohibited from requiring AWS personnel to sign additional terms as a condition of receiving free services, and any such documentation signed by AWS personnel is void.
View change record →Removal of this detailed high-severity prohibition of specific harmful use cases (weapons, illegal activities, child exploitation) may indicate consolidation into broader Acceptable Use Policy references or regulatory simplification.
View full change record →Expanded prohibited content categories to include deception and third-party rights violations, added specific prohibitions on weapons and child sexual abuse material, and removed requirement to implement safeguards for end users.
View full change record →Businesses building applications on Bedrock must ensure their end users cannot use those applications to generate prohibited content categories, as the terms hold the Bedrock customer responsible for use occurring through their application, not just their own direct use.
How other platforms handle this
In assessing misuse, we consider factors such as evidence that a report was motivated by bias or hatred (e.g., based on protected characteristics such as race, sexual orientation, or gender identity) or other malicious intent.
We review account behavior and content that Members create, send, and publish in Mailchimp, including Campaigns and Websites.
We allow Content that names individuals in the highest positions in a company who have broad influence over the work environment, as long as the Content describes the individual's behavior or performance at work.
"You may not use Amazon Bedrock to generate content that is illegal, harmful, deceptive, or violates the rights of third parties. You may not use the Service to generate content that facilitates the creation of weapons, illegal activities, or material that sexualizes minors.Excerpt from AWS Bedrock's AWS Service Terms
(1) REGULATORY LANDSCAPE: Prohibited use categories including child sexual abuse material engage mandatory reporting obligations under US federal law (PROTECT Our Children Act) and equivalent statutes in other jurisdictions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These restrictions define the outer boundary of permitted Bedrock use cases and carry account termination risk for violations; organizations providing Bedrock-based services to end users must ensure their downstream use cases comply with these restrictions.
Businesses building applications on Bedrock must ensure their end users cannot use those applications to generate prohibited content categories, as the terms hold the Bedrock customer responsible for use occurring through their application, not just their own direct use.
ConductAtlas has identified this type of provision across 142 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.