4

DOCUMENT STRUCTURE

c5
The requested document is appended to this terms and conditions page. This document
contains supplementary attachments. To access the supplementary attachments, you must open
this document in an application that supports PDF attachments. See the AWS Artifact User Guide

a8
for instructions on how to open attachments.

TERMS AND CONDITIONS

fff
You hereby agree that you will not distribute, display, or otherwise make this document available
to an individual or entity, unless expressly permitted herein. This document is AWS Confidential

49
Information (as defined in the AWS Customer Agreement), and you may not remove these terms
and conditions from this document, nor take excerpts of this document, without Amazon’s
express written consent. You may not use this document for purposes competitive with Amazon.

58
You may distribute this document, in its complete form, upon the commercially reasonable
request by (1) an end user of your service, to the extent that your service functions on relevant
AWS offerings provided that such distribution is accompanied by documentation that details the

2-
function of AWS offerings in your service, provided that you have entered into a confidentiality
agreement with the end user that includes terms not less restrictive than those provided herein

74
and have named Amazon as an intended beneficiary, or (2) a regulator, so long as you request
confidential treatment of this document (each (1) and (2) is deemed a “Permitted Recipient”).
You must keep comprehensive records of all Permitted Recipient requests, and make such records
-8
available to Amazon and its auditors, upon request. You further (i) acknowledge and agree that
you do not acquire any rights against Amazon’s Service Auditors in connection with your receipt
a8

or use of this document, and (ii) release Amazon’s Service Auditor from any and all claims or
causes of action that you have now or in the future against Amazon’s Service Auditor arising from
this document. The foregoing sentence is meant for the benefit of Amazon’s Service Auditors,
4a

who are entitled to enforce it. “Service Auditor” means the party that created this document for
Amazon or assisted Amazon with creating this document.
b-
b1
-2
bd
bc
6a
d7
 4
c5
AWS Customer Compliance Guides

a8
Welcome to Amazon Web Services’ Customer Compliance Guides (CCGs) provided to you
through AWS Artifact!

fff
The contents of this package are attached. Double-click the paperclip icon here

49
By opening or using this Customer Compliance Guide (CCG) document, you agree to the Terms
of Use set forth below. If you do not wish to adhere to the Terms of Use, do not open or use
this CCG document.

58
We value your feedback. Please take our AWS Customer Compliance Guides Survey.

Description

2-
Customer Compliance Guides are intended to serve as an informative resource for customers
leveraging the shared responsibility model in navigating their security compliance needs. CCGs

74
are derived from AWS Service User Guides and are designed to provide a consolidated view of
AWS security practices based on the configurable options for a service and the related
compliance topics and control requirements. Customers may use CCGs to facilitate an
-8
understanding AWS’s current product offerings and practices as of the date of issue of this
document.
a8

The CCG is not designed to address all aspects of a given compliance framework or all possible
configurable options for a service. Customers are responsible for determining compliance
requirements and validating control implementation in accordance with their organization’s
4a

policies, requirements and objectives. The security practices described in this CCG may not
represent the best course of action for every organization.
b-

We encourage you to share feedback on the usefulness of this CCG and welcome
recommendations. Please email us at [email protected].
b1

Note: Some products referenced in this CCG may not yet be in scope for a particular
compliance program or in a certain region. Refer to the AWS Services in Scope page for a list of
services in scope by compliance program.
-2

TERMS OF USE
bd

Customers are responsible for making their own independent assessment of the information in
this CCG. This CCG: (a) is provided for informational purposes only, (b) represents current
AWS product offerings and practices at the time of publication, which are subject to change
without notice, and (c) does not create any commitments or assurances from AWS and its
bc

affiliates, suppliers or licensors.

This CCG does not constitute legal or compliance advice. This CCG is provided “as is” and
6a

AWS disclaims all warranties, representations, or conditions of any kind, whether express,
implied, statutory, or otherwise relating to this CCG. AWS specifically disclaims all implied
warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and all
d7

Document version v2.4, February 2, 2024

 4
c5
warranties arising from course of dealing, usage, or trade practice with respect to all use of this
CCG. For avoidance of doubt, AWS does not warrant that any information contained in this

a8
CCG, or any use of or any results of the use of this CCG, will meet customer’s or any other
person’s requirements or objectives, achieve any intended result, or be accurate, complete, or
error free. The responsibilities and liabilities of AWS to its customers are controlled by AWS

fff
agreements. This document is not part of and does not modify any agreement between AWS
and its customers.

49
In no event will AWS be liable in connection with any use of this CCG under any legal or
equitable theory, including breach of contract, tort (including negligence), strict liability, and
otherwise, including without limitation for any (a) consequential, incidental, indirect, exemplary,
special, enhanced, or punitive damages, (b) increased costs, diminution in value, or lost

58
business, production, revenues, or profits, (c) loss of goodwill or reputation, (d) use, inability to
use, loss, interruption, delay, or recovery of any data or breach of data or system security, or (e)
cost of replacement goods or services, in each case regardless of whether AWS was advised of

2-
the possibility of such losses or damages or such losses or damages were otherwise
foreseeable.

74
-8
a8
4a
b-
b1
-2
bd
bc
6a
d7

Document version v2.4, February 2, 2024