Step 1: Sign up for AWS
If you do not have an AWS account, complete the following steps to create one.
To sign up for an AWS account
1. Open https://portal.aws.amazon.com/billing/signup.
2. Follow the online instructions.
Part of the sign-up procedure involves receiving a phone call and entering a verification code on the phone keypad.
Step 2: Download a report
You can download reports using Adobe Acrobat Reader. Other PDF readers are not supported. For more information, see Downloading reports (p. 4).
To download a report
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact home page, choose View reports.
3. (Optional) Enter a keyword in the search field to locate a report.
4. Select a report, and then choose Download report.
5. You might be asked to accept Terms and Conditions that apply to the specific report you are downloading. We recommend that you read them closely. When you are finished, select I have read and agree to all the terms and then choose Accept terms and download.
6. Open the downloaded file using Adobe Acrobat Reader. Read the Terms and Conditions section.
When you are finished, follow the instructions to view the downloaded report.
Step 3: Manage agreements
Before you enter into an agreement, you must download and agree to the terms of the AWS Artifact nondisclosure agreement (NDA). Each agreement is confidential and cannot be shared with others outside of your company.
Step 3: Manage agreements
To accept an agreement with AWS
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact navigation pane, choose Agreements.
3. Choose Account agreements to manage agreements for your account or Organization agreements to manage agreements on behalf of your organization.
4. Expand the section of the agreement.
5. Choose Download and review.
6. Read the Terms and Conditions. When you are finished, choose Accept and download.
7. Review the agreement and then select the check boxes to indicate that you agree.
8. Choose Accept to accept the agreement.
For more information, see Managing agreements (p. 6).
Downloading a report
Downloading reports in AWS Artifact
You can download reports from the AWS Artifact console. When you download a report from AWS Artifact, the report is generated specifically for you, and every report has a unique watermark. For this reason, you should share the reports only with those you trust. Don't email the reports as attachments, and don't share them online. To share a report, use a secure sharing service such as Amazon WorkDocs.
Some reports require you to accept the Terms and Conditions before you can download them.
Contents
• Downloading a report (p. 4)
• Securing your documents (p. 4)
• Troubleshooting (p. 5)
Downloading a report
To download a report, you must have the required permissions. For more information, see Identity and access management in AWS Artifact (p. 10).
When you sign up for AWS Artifact, your account is automatically granted permissions to download some reports. If you need to request access to another listed report, use the provided form to request access from AWS.
To download a report
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact home page, choose View reports.
3. (Optional) Enter a keyword in the search field to locate a report.
4. Select a report, and then choose Download report.
5. You might be asked to accept Terms and Conditions that apply to the specific report you are downloading. We recommend that you read them closely. When you are finished, select I have read and agree to all the terms and then choose Accept terms and download.
6. Open the downloaded file using Adobe Acrobat Reader. Read the Terms and Conditions section.
When you are finished, follow the instructions to view the downloaded report.
Securing your documents
AWS Artifact documents are confidential and should be kept secure at all times. AWS Artifact uses the AWS shared responsibility model for its documents. This means that AWS is responsible for keeping documents secure while they are in the AWS Cloud, but you are responsible for keeping them secure after you download them. AWS Artifact might require you to accept the Terms and Conditions before you can download documents. Each document download has a unique, traceable watermark.
You are only permitted to share documents marked as confidential within your company, with your regulators, and with your auditors. You aren't permitted to share these documents with your customers or on your website. We strongly recommend that you use a secure document sharing service, such as Amazon WorkDocs, to share documents with others. Do not send the documents through email or upload them to a site that is not secure.
Troubleshooting
Troubleshooting
If you cannot download a document or receive an error message, see Troubleshooting in the AWS Artifact FAQ.
Agreements for a single account
Managing agreements in AWS Artifact
AWS Artifact Agreements enable you to use the AWS Management Console to review, accept, and manage agreements for your account or organization. For example, a Business Associate Addendum (BAA) agreement typically is required for companies that are subject to the Health Insurance Portability and Accountability Act (HIPAA) to ensure that protected health information (PHI) is appropriately safeguarded. You can use AWS Artifact to accept an agreement such as the BAA with AWS, and designate an AWS account that can legally process PHI. If you use AWS Organizations, you can accept agreements such as the AWS BAA on behalf of all accounts in your organization. All existing and subsequent member accounts are automatically covered by the agreement and can legally process PHI.
You can also use AWS Artifact to confirm that your AWS account or organization accepted an agreement and to review the terms of the accepted agreement to understand your obligations. If your account or organization no longer needs to use the accepted agreement, you can use AWS Artifact to terminate the agreement. If you terminate the agreement but later realize that you need it, you can activate it again.
Contents
• Managing an agreement for a single account in AWS Artifact (p. 6)
• Managing an agreement for multiple accounts in AWS Artifact (p. 7)
• Managing an existing offline agreement in AWS Artifact (p. 9)
Managing an agreement for a single account in AWS Artifact
You can accept agreements for just your account, even if your account is a member account in an organization in AWS Organizations. For more information about AWS Organizations, see the AWS Organizations User Guide.
Accepting an agreement with AWS
Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.
Required permissions
If you're an administrator of an account, you can grant IAM users and federated users with roles the permissions to access and manage one or more of your agreements. By default, only users with administrative privileges can accept an agreement. To accept an agreement, IAM and federated users must have the following permissions:
artifact:DownloadAgreement artifact:AcceptAgreement
For more information, see Identity and access management (p. 10).
Terminating an agreement with AWS
To accept an agreement with AWS
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact navigation pane, choose Agreements.
3. Choose the Account agreements tab.
4. Expand the section of the agreement.
5. Choose Download and review.
6. Read the Terms and Conditions. When you are finished, choose Accept and download.
7. Review the agreement and then select the check boxes to indicate that you agree.
8. Choose Accept to accept the agreement for your account.
Terminating an agreement with AWS
If you used the AWS Artifact console to accept an agreement, you can use the console to terminate that agreement. Otherwise, see Offline agreements (p. 9).
Required permissions
To terminate an agreement, IAM and federated users must have the following permissions:
artifact:TerminateAgreement
For more information, see Identity and access management (p. 10).
To terminate your online agreement with AWS
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact navigation pane, choose Agreements.
3. Choose the Account agreements tab.
4. Select the agreement and choose Terminate agreement.
5. Select all check boxes to indicate that you agree to terminate the agreement.
6. Choose Terminate. When prompted for confirmation, choose Terminate.
Managing an agreement for multiple accounts in AWS Artifact
If you are the owner of the management account of an AWS Organizations organization, you can accept an agreement on behalf of all accounts in your organization. You must be signed in to the management account with the correct AWS Artifact permissions to accept or terminate organization agreements. Users of member accounts with describeOrganizations permissions can view the organization agreements that are accepted on their behalf.
If your account is not part of an organization, you can create or join an organization by following the instructions in Creating and managing an organization in the AWS Organizations User Guide.
AWS Organizations has two available feature sets: consolidated billing features and all features. To use AWS Artifact for your organization, the organization that you belong to must be enabled for all features. If your organization is configured only for consolidated billing, see Enabling all features in your organization in the AWS Organizations User Guide.
Accepting an agreement for your organization
If a member account is removed from an organization, that member account will no longer be covered by organization agreements. Management account administrators should communicate this to member accounts before removing member accounts from the organization, so that member accounts can put new agreements in place if necessary. A list of active organization agreements can be viewed in AWS Artifact Organization agreements.
For more information, see Managing the AWS accounts in your organization in the AWS Organizations User Guide.
Accepting an agreement for your organization
You can accept an agreement on behalf of all member accounts in your organization in AWS
Organizations. Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.
Required permissions
To accept an agreement, the owner of the management account must have the following permissions:
artifact:DownloadAgreement
For more information, see Identity and access management (p. 10).
To accept an agreement for an organization
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact dashboard, choose Agreements.
3. Choose the Organization agreements tab.
4. Expand the section of the agreement.
5. Choose Download and review.
6. Read the Terms and Conditions. When you are finished, choose Accept and download.
7. Review the agreement and then select the check boxes to indicate that you agree.
8. Choose Accept to accept the agreement for all existing and future accounts in your organization..
Terminating an organization agreement
If you used the AWS Artifact console to accept an agreement on behalf of all member accounts in an organization, you can use the console to terminate that agreement. Otherwise, see Offline agreements (p. 9).
Required permissions
To terminate an agreement, the owner of the management account must have the following permissions:
artifact:DownloadAgreement artifact:TerminateAgreement
organizations:DescribeOrganization
Offline agreements
organizations:EnableAWSServiceAccess
organizations:ListAWSServiceAccessForOrganization iam:ListRoles
iam:CreateRole iam:AttachRolePolicy
For more information, see Identity and access management (p. 10).
To terminate your online organization agreement with AWS
1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.
2. On the AWS Artifact dashboard, choose Agreements.
3. Choose the Organization agreements tab.
4. Select the agreement and choose Terminate agreement.
5. Select all check boxes to indicate that you agree to terminate the agreement.
6. Choose Terminate. When prompted for confirmation, choose Terminate.
Managing an existing offline agreement in AWS Artifact
If you have an existing offline agreement, AWS Artifact displays the agreements that you accepted offline. For example, the console might display the Offline Business Associate Addendum (BAA) with an Active status. The active status indicates that the agreement was accepted. To terminate an offline agreement, see the termination guidelines and instructions that are included in your agreement.
If your account is the management account in an AWS Organizations organization, you can use AWS Artifact to apply the terms of your offline agreement to all accounts in your organization. To apply an agreement that you accepted offline to your organization and all accounts in your organization, you must have the following permissions:
organizations:DescribeOrganization organizations:EnableAWSServiceAccess
organizations:ListAWSServiceAccessForOrganization iam:ListRoles
iam:CreateRole iam:AttachRolePolicy
If your account is a member account in an organization, you must have the following permissions to see your offline organization agreements:
organizations:DescribeOrganization
For more information, see Identity and access management (p. 10).
Create IAM users and grant them access to AWS Artifact
Identity and access management in AWS Artifact
When you sign up for AWS, you provide an email address and password that are associated with your AWS account. These are your root credentials, and they provide complete access to all of your AWS resources, including resources for AWS Artifact. However, we strongly recommend that you don't use the root account for everyday access. We also recommend that you don't share account credentials with others to give them complete access to your account.
Instead of signing in to your AWS account with root credentials or sharing your credentials with others, you should create a special user identity called an IAM user for yourself and for anyone who might need access to a document or agreement in AWS Artifact. With this approach, you can provide individual sign-in sign-information for each user, and you can grant each user only the permissions that they need to work with specific documents. You can also grant multiple IAM users the same permissions by granting the permissions to an IAM group and adding the IAM users to the group.
If you already manage user identities outside AWS, you can use IAM identity providers instead of creating IAM users. For more information, see Identity providers and federation in the IAM User Guide.
Create IAM users and grant them access to AWS Artifact
Complete the following steps to grant users permissions to AWS Artifact based on the level of access they need.
Tasks