AWS notified me that my account's resources were reported for abusive activity. What does this mean, and what do I need to do?

The AWS Abuse team will send abuse reports to the security contact on your account. If there is no security contact listed, the AWS Abuse team will contact you using the email address listed on your account.

If you receive an abuse notice from AWS, do the following:

  1. Review the abuse notice to see what content or activity was reported. Logs that implicate abuse will be included along with the abuse report, as provided by the reporter.
  2. Reply directly to the abuse report and explain how you're preventing the abusive activity from recurring in the future.
    If you don't respond to an abuse notice within 24 hours, AWS might block your resources or suspend your AWS account.

If more information is required, reply directly to the email from the abuse team. The AWS Abuse team can request additional information from the reporter.

AWS Abuse does not provide technical support. If you need technical help and have a Developer or Business AWS Support plan, create a support case through the AWS Support Center and choose Technical support. You can find additional resources at How do I get help with my AWS account and resources?

If you believe your resources or account have been compromised, see My AWS account may be compromised. Make sure that your instances and all applications are properly secured as per the shared responsibility model. You can use AWS services like AWS GuardDuty and AWS Trusted Advisor to help you identify opportunities to secure your resources.

Did this page help you? Yes | No

Back to the AWS Support Knowledge Center

Need help? Visit the AWS Support Center

Published: 2016-09-26