What do I do when I receive an abuse report from AWS about my resources?

Short description

The AWS Trust & Safety Team sends abuse reports to the security contact on your account. If there is no security contact listed, then the AWS Trust & Safety Team contacts you using the email address listed on your account.

If you require more information, reply to the email from the AWS Trust & Safety Team. The team will request additional information from the reporter.

If you observe unauthorized activity, or if you believe that an unauthorized party has accessed your AWS account, see What do I do if I notice unauthorized activity in my AWS account? Make sure that your instances and applications are properly secured by following the shared responsibility model.

You can use AWS services, such as Amazon GuardDuty and AWS Trusted Advisor, to help you identify opportunities to secure your resources.

Resolution

If you receive an abuse notice from AWS, do the following:

1. Review the abuse notice to see what content or activity was reported. Logs that implicate abuse are included along with the abuse report, as provided by the reporter.
2. Reply directly to the abuse report and explain how you're preventing the abusive activity from recurring in the future. Note: If you don't respond to an abuse notice within 24 hours, AWS might block your resources or suspend your AWS account.

The AWS Trust & Safety Team doesn't provide technical support. If you need technical help and have a Developer or Business AWS Support plan, see How do I get technical support from AWS? For additional resources, see How do I get help with my AWS account and resources?

Related information

How do I report abuse of AWS resources?