What do I do when I receive an abuse report from AWS about my resources?

2 minute read
0

AWS notified me that my account's resources were reported for abusive activity. What does this mean, and what do I need to do?

Short description

The AWS Trust & Safety Team sends abuse reports to the security contact on your account. If there is no security contact listed, then the AWS Trust & Safety Team contacts you using the email address listed on your account.

If you require more information, reply to the email from the AWS Trust & Safety Team. The team will request additional information from the reporter.

If you observe unauthorized activity, or if you believe that an unauthorized party has accessed your AWS account, see What do I do if I notice unauthorized activity in my AWS account? Make sure that your instances and applications are properly secured by following the shared responsibility model.

You can use AWS services, such as Amazon GuardDuty and AWS Trusted Advisor, to help you identify opportunities to secure your resources.

Resolution

If you receive an abuse notice from AWS, do the following:

  1. Review the abuse notice to see what content or activity was reported. Logs that implicate abuse are included along with the abuse report, as provided by the reporter.
  2. Reply directly to the abuse report and explain how you're preventing the abusive activity from recurring in the future. Note: If you don't respond to an abuse notice within 24 hours, AWS might block your resources or suspend your AWS account.

The AWS Trust & Safety Team doesn't provide technical support. If you need technical help and have a Developer or Business AWS Support plan, see How do I get technical support from AWS? For additional resources, see How do I get help with my AWS account and resources?


Related information

How do I report abuse of AWS resources?

AWS OFFICIAL
AWS OFFICIALUpdated a year ago
2 Comments

What this process does not help with is dealing. with FALSE POSITIVE spam abuse reports that cause business interruptions.

replied 3 months ago

Thank you for your comment. We'll review and update the Knowledge Center article as needed.

profile pictureAWS
MODERATOR
replied 3 months ago