AWS Bedrock · AWS Service Terms · View original document ↗

Acceptable Use and Prohibited Applications

High severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for AWS Bedrock Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The terms prohibit using Bedrock to generate illegal content, content that could facilitate weapons development, or content that sexualizes minors, among other harmful categories.

This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

These restrictions define the outer boundary of permitted Bedrock use cases and carry account termination risk for violations; organizations providing Bedrock-based services to end users must ensure their downstream use cases comply with these restrictions.

Recent Activity

This document changed recently

Medium May 9, 2026

This change introduces a new optional service feature rather than modifying existing consumer rights or obligations. AWS explicitly disclaims providing regulated financial services, holding custody o…

Consumer impact (what this means for users)

Businesses building applications on Bedrock must ensure their end users cannot use those applications to generate prohibited content categories, as the terms hold the Bedrock customer responsible for use occurring through their application, not just their own direct use.

How other platforms handle this

Venmo Medium

You may not use the Venmo services for any illegal purpose, to send money to any person or organization on a government sanctions list, for gambling, for purchasing or selling illegal goods or services, or for any activity that violates applicable law. You may not use Venmo for commercial transactio...

Adyen Medium

You agree to comply with Adyen's Acceptable Use Policy, as updated from time to time, which forms part of these Terms and Conditions. Adyen reserves the right to update the Acceptable Use Policy at any time.

Atlassian Medium

Customer and its Users must use the Products in accordance with the Atlassian Acceptable Use Policy. Customer is responsible for ensuring that Users comply with this Agreement and the Atlassian Acceptable Use Policy.

See all platforms with this clause type →

Monitoring

AWS Bedrock has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You may not use Amazon Bedrock to generate content that is illegal, harmful, deceptive, or violates the rights of third parties. You may not use the Service to generate content that facilitates the creation of weapons, illegal activities, or material that sexualizes minors.

— Excerpt from AWS Bedrock's AWS Service Terms

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: Prohibited use categories including child sexual abuse material engage mandatory reporting obligations under US federal law (PROTECT Our Children Act) and equivalent statutes in other jurisdictions. Restrictions on weapons-related content engage export control regulations including EAR and ITAR in the US context. The EU AI Act's prohibited AI practices provisions also overlap with some of these categories. (2) GOVERNANCE EXPOSURE: High for organizations operating consumer-facing applications built on Bedrock. The terms impose on the Bedrock customer a duty to prevent prohibited use by their own end users, which requires technical and policy controls at the application layer. (3) JURISDICTION FLAGS: All jurisdictions have relevant laws regarding illegal content generation. The EU AI Act's prohibited practices list includes specific AI use cases that overlap with these restrictions. US federal law creates mandatory reporting obligations for certain categories of illegal content that Bedrock customers must be aware of. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations building consumer applications on Bedrock should include downstream acceptable use policies in their own terms of service that mirror or exceed the Bedrock restrictions, and should implement technical controls to prevent prohibited content generation. (5) COMPLIANCE CONSIDERATIONS: Organizations should conduct a risk assessment of their application's potential for misuse in prohibited categories and implement content moderation, user authentication, and abuse reporting mechanisms appropriate to their risk profile. Legal review of whether specific planned use cases fall within prohibited categories should be conducted prior to deployment.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over deceptive and harmful AI practices and may take action against organizations whose AI deployments facilitate consumer harm through prohibited content categories.
    File a complaint →

Applicable regulations

CFAA
United States Federal

Provision details

Document information
Document
AWS Service Terms
Entity
AWS Bedrock
Document last updated
May 5, 2026
Tracking information
First tracked
May 12, 2026
Last verified
May 12, 2026
Record ID
CA-P-011416
Document ID
CA-D-00648
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
880a4da359a0dff037c3d51956decd29ac6fa13b72df323303ce916dc8798c62
Analysis generated
May 12, 2026 09:51 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: AWS Bedrock
Document: AWS Service Terms
Record ID: CA-P-011416
Captured: 2026-05-12 09:51:22 UTC
SHA-256: 880a4da359a0dff0…
URL: https://conductatlas.com/platform/aws-bedrock/aws-service-terms/acceptable-use-and-prohibited-applications/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does AWS Bedrock's Acceptable Use and Prohibited Applications clause do?

These restrictions define the outer boundary of permitted Bedrock use cases and carry account termination risk for violations; organizations providing Bedrock-based services to end users must ensure their downstream use cases comply with these restrictions.

How does this clause affect you?

Businesses building applications on Bedrock must ensure their end users cannot use those applications to generate prohibited content categories, as the terms hold the Bedrock customer responsible for use occurring through their application, not just their own direct use.

Is ConductAtlas affiliated with AWS Bedrock?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.