Provision record
AWS Bedrock · AWS Service Terms · View original document ↗

ACM certificate must be immediately ceased on key compromise

High severity Explicit document language Common · 296 of 352 platforms
Stay ahead of the changes
Track AWS Bedrock and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what AWS Bedrock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Jul 30, 2026

The updated terms now explicitly state that AWS IoT SiteWise Scenario Discovery is not designed for real-time vehicle control and cannot be used as the sole basis for determining vehicle safety or regulatory compliance. Organizations deploying this service must implement independent human monitoring and safety validation before using its outputs to support vehicle system decisions. The terms make clear that AWS assumes no responsibility for uses that violate these constraints.

View change record →
Medium Jul 18, 2026

The updated terms establish new restrictions on how AWS Capacity Reservations may be used. Specifically, customers purchasing On-Demand Capacity Reservations can no longer resell them to other parties, and AWS reserves the right to cancel the purchase or terminate running instances if the company suspects resale activity. For Capacity Blocks for ML, the grace period before instance termination increased from 30 minutes to 60 minutes for UltraServer instance types, allowing slightly more time to complete workloads. The Amazon Sidewalk qualification program was renamed and simplified, but the underlying security and operational requirements remain in effect.

View change record →
Medium Jun 30, 2026

The updated terms establish a formal framework for AWS Bedrock's free exploration services, clarifying the operational boundaries and responsibilities. AWS reserves the right to discontinue these services at any time without prior notice, meaning customers cannot rely on their continuation for production planning. Customers are solely responsible for testing, deploying, and maintaining any code, documents, or AI solutions AWS provides, including determining whether those solutions comply with applicable law. AWS retains the right to develop competing products based on content it creates during these engagements, though this does not override existing non-disclosure agreements. Customers are prohibited from requiring AWS personnel to sign additional terms as a condition of receiving free services, and any such documentation signed by AWS personnel is void.

View change record →

How other platforms handle this

ActiveCampaign Medium

You must book your session for a date and time within thirty (30) days of the date of purchase, or if you are onboarding with ActiveCampaign for the Services, then within thirty (30) days after your onboarding is complete...

Revolut Medium

To meet our legal and regulatory requirements we, or someone acting for us, might sometimes need to ask for more information... Please provide this information quickly so that there is no disruption to your account...

Tinder Medium

If you believe we have taken action against your content or account in a way that does not comply with these Terms, you have the right to bring a claim for breach of contract under UK law.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
You will promptly cease using a Certificate, and promptly notify us, if the private key associated with the Certificate is subject to a Key Compromise...or the Certificate is otherwise subject to misuse...

Excerpt from AWS Bedrock's AWS Service Terms

Provision details

Document information
Document
AWS Service Terms
Entity
AWS Bedrock
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-052800
Document ID
CA-D-00648
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
83d284e932cce0fb70f9c098a11039b78dc496bb03b15955d175ddd7d90142ee
Analysis generated
July 9, 2026 09:33 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: AWS Bedrock
Document: AWS Service Terms
Record ID: CA-P-052800
Captured: 2026-07-09 09:33:58 UTC
SHA-256: 83d284e932cce0fb…
URL: https://conductatlas.com/platform/aws-bedrock/aws-service-terms/provision/CA-P-052800/acm-certificate-must-be-immediately-ceased-on-key-compromise/
Accessed: Aug. 2, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does AWS Bedrock's ACM certificate must be immediately ceased on key compromise clause do?

The clause states: “You will promptly cease using a Certificate, and promptly notify us, if the private key associated with the Certificate is subject to a Key Compromise...or the Certificate is otherwise subject to misuse...”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.

Is ConductAtlas affiliated with AWS Bedrock?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by AWS Bedrock.