AWS AI services ToS allow sharing of customer data
Published Thu, Jan 6th, 2022
Platforms
Summary
Use of the AI services on AWS allows customer data to be moved outside of the regions it is used in and potentially shared with third-parties. Note: This issue is outside the scope of this database's usual criteria for inclusion, but has been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
Affected Services
N/A
Remediation
Customers can opt out of this data usage by following the instructions included in the linked reference.
Tracked CVEs
No tracked CVEs
References
https://twitter.com/benbridts/status/1280934515305824256https://summitroute.com/blog/2021/01/06/opting_out_of_aws_ai_data_usage/
Contributed by https://github.com/0xdabbad00
Entry Status
Finalized
Disclosure Date
Wed, Jul 8th, 2020
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
Ben Bridts
