Customers accessing third-party foundation models through Bedrock are required to comply with each model provider's separately published acceptable use policies, which are incorporated by reference into the AWS Service Terms. These policies are maintained by providers including Anthropic, Meta, and Cohere and may be updated independently.
This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision creates a dynamic compliance obligation that extends beyond the AWS agreement itself; customers must monitor and comply with third-party model provider policies that can be updated outside the AWS contract review cycle. Compliance teams must maintain awareness of each model provider's current terms for all models accessed in production deployments.
Interpretive note: The specific language reproduced here is a characterization based on the known structure of AWS Service Terms Section 50; the source document was truncated before the full Bedrock-specific provisions were visible.
The updated terms now explicitly state that AWS IoT SiteWise Scenario Discovery is not designed for real-time vehicle control and cannot be used as the sole basis for determining vehicle safety or regulatory compliance. Organizations deploying this service must implement independent human monitoring and safety validation before using its outputs to support vehicle system decisions. The terms make clear that AWS assumes no responsibility for uses that violate these constraints.
View change record →The updated terms establish new restrictions on how AWS Capacity Reservations may be used. Specifically, customers purchasing On-Demand Capacity Reservations can no longer resell them to other parties, and AWS reserves the right to cancel the purchase or terminate running instances if the company suspects resale activity. For Capacity Blocks for ML, the grace period before instance termination increased from 30 minutes to 60 minutes for UltraServer instance types, allowing slightly more time to complete workloads. The Amazon Sidewalk qualification program was renamed and simplified, but the underlying security and operational requirements remain in effect.
View change record →The updated terms establish a formal framework for AWS Bedrock's free exploration services, clarifying the operational boundaries and responsibilities. AWS reserves the right to discontinue these services at any time without prior notice, meaning customers cannot rely on their continuation for production planning. Customers are solely responsible for testing, deploying, and maintaining any code, documents, or AI solutions AWS provides, including determining whether those solutions comply with applicable law. AWS retains the right to develop competing products based on content it creates during these engagements, though this does not override existing non-disclosure agreements. Customers are prohibited from requiring AWS personnel to sign additional terms as a condition of receiving free services, and any such documentation signed by AWS personnel is void.
View change record →The removal of this Bedrock-specific provision suggests a shift away from third-party model provider accountability or consolidation of AI governance.
View full change record →This provision formalizes incorporation by reference of third-party model terms directly into Bedrock's service terms, clarifying that violations of third-party terms constitute Bedrock service term violations.
View full change record →Under this clause, customers are contractually bound not only by AWS's own acceptable use policy but also by the separate policies of each foundation model provider whose model is accessed through Bedrock. The agreement incorporates these third-party policies by reference, meaning changes to a model provider's policies automatically become binding contractual obligations.
How other platforms handle this
Use our Services in relation to any political campaign financing or for the purpose of influencing any election, other than sharing your own personal political opinions;
Host Content on our servers for any purpose other than for your use of the Service.
use TikTok Content...another user's content or generative AI-enabled features for commercial purposes unless permitted by TikTok USDS Joint Venture or the user, respectively...
"You must comply with all terms and conditions applicable to the third-party models available in Amazon Bedrock, which are incorporated by reference into these Service Terms. These terms are available on the Amazon Bedrock console or in the Amazon Bedrock documentation.Excerpt from AWS Bedrock's AWS Service Terms
(1) REGULATORY LANDSCAPE: This provision engages the FTC Act insofar as non-compliance with incorporated model provider policies could constitute a deceptive or unfair practice if customer-facing applications violate disclosed usage restrictions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision creates a dynamic compliance obligation that extends beyond the AWS agreement itself; customers must monitor and comply with third-party model provider policies that can be updated outside the AWS contract review cycle. Compliance teams must maintain awareness of each model provider's current terms for all models accessed in production deployments.
Under this clause, customers are contractually bound not only by AWS's own acceptable use policy but also by the separate policies of each foundation model provider whose model is accessed through Bedrock. The agreement incorporates these third-party policies by reference, meaning changes to a model provider's policies automatically become binding contractual obligations.
ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.