AWS data-exchange high security documentation change
Summary
Added explicit prohibition on sharing sensitive U.S. data to countries of concern per Executive Order 14117 requirements
Security assessment
Directly references U.S. national security regulations about sensitive data handling and adds specific compliance requirements
Diff
diff --git a/data-exchange/latest/userguide/publishing-guidelines.md b/data-exchange/latest/userguide/publishing-guidelines.md index 4171b420d..189357179 100644 --- a//data-exchange/latest/userguide/publishing-guidelines.md +++ b//data-exchange/latest/userguide/publishing-guidelines.md @@ -31 +31 @@ In addition, unless you're a qualified data provider under AWS Data Exchange’s - 6. You may not use AWS Data Exchange to promote any other products or solutions not listed on AWS Marketplace, except for products or solutions that are not compatible with AWS Marketplace. + 6. You may not use AWS Data Exchange to provide or otherwise make accessible or available Bulk U.S. Sensitive Personal Data, including, deidentified, key coded, or anonymized data, or U.S. Government-related Data to Countries of Concern or Covered Persons as each is defined in the U.S. Department of Justice Final Rule implementing Executive Order 14117, Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern, available [here](https://www.federalregister.gov/documents/2025/01/08/2024-31486/preventing-access-to-us-sensitive-personal-data-and-government-related-data-by-countries-of-concern). @@ -33 +33 @@ In addition, unless you're a qualified data provider under AWS Data Exchange’s - 7. You are limited to distributing data sets that meet the legal eligibility requirements set forth in the Terms and Conditions for AWS Marketplace Sellers. If you breach these terms in any way, the prohibited product is removed from AWS Data Exchange and you might be suspended from the service. + 7. You may not use AWS Data Exchange to promote any other products or solutions not listed on AWS Marketplace, except for products or solutions that are not compatible with AWS Marketplace. @@ -35 +35,3 @@ In addition, unless you're a qualified data provider under AWS Data Exchange’s - 8. If you're listing an API data set in a product: + 8. You are limited to distributing data sets that meet the legal eligibility requirements set forth in the Terms and Conditions for AWS Marketplace Sellers. If you breach these terms in any way, the prohibited product is removed from AWS Data Exchange and you might be suspended from the service. + + 9. If you're listing an API data set in a product: @@ -41 +43 @@ In addition, unless you're a qualified data provider under AWS Data Exchange’s - 9. Logos, DSAs, and other attachments added to your product might be stored separately from where your actual data products sits. + 10. Logos, DSAs, and other attachments added to your product might be stored separately from where your actual data products sits.