AWS Acceptable Use Policy 2021-07-01
Citation
Amazon Web Services, Inc. “AWS Acceptable Use Policy.” Policy web page, last updated 2021-07-01. https://aws.amazon.com/aup/. Read 2026-10-15.
Bottom line
- The AWS Acceptable Use Policy is short and general. It has six prohibited uses that apply to all AWS services.
- It names child sexual exploitation, violence and terrorism, and attacks on the security of systems. It does not name weapons, surveillance, elections or automated decisions.
- AWS puts its AI-specific limits in a separate document, the AWS Responsible AI Policy 2025-01-13.
Background
The policy covers “the services offered by Amazon Web Services, Inc. and its affiliates”.
Key claims
“You may not use, or facilitate or allow others to use, the Services or the AWS Site”:
- “for any illegal or fraudulent activity;”
- “to violate the rights of others;”
- “to threaten, incite, promote, or actively encourage violence, terrorism, or other serious harm;”
- “for any content or activity that promotes child sexual exploitation or abuse;”
- “to violate the security, integrity, or availability of any user, network, computer or communications system, software application, or network or computing device;”
- “to distribute, publish, send, or facilitate the sending of unsolicited mass email or other messages, promotions, advertising, or solicitations (or “spam”).”
“Investigation and Enforcement”:
- “We may investigate any suspected violation of this Policy, and remove or disable access to any content or resource that violates this Policy. You agree to cooperate with us to remedy any violation.”
- “we may consider your ability and willingness to comply with this Policy, including the policies and processes you have in place to prevent or identify and remove any prohibited content or activity.”
Evidence and method
This is a policy document, not research. It states rules. It gives no data on how often AWS enforces them.
Limits
- AWS last updated the policy on 2021-07-01. It is older than the generative AI services that AWS now sells.
- The policy does not name suspension or termination. It names only investigation and “remove or disable access”. Other AWS agreements can add these steps.
- The policy does not name research exceptions.