Cloud platform security control rules
When you use Alibaba Cloud products or services, you must comply with all applicable national laws, administrative regulations, and other regulatory documents. You are responsible for providing legal products and services and for fulfilling your obligations under these laws. If you violate these regulations, Alibaba Cloud reserves the right to delete information, pause services, or stop services in accordance with the relevant terms of service. Alibaba Cloud also reserves the right to restrict some or all of your account's features, such as the ability to purchase new products or services and renew existing ones.
Violation type descriptions
For more information about security violation information types, see Security violation information types.
For more information about security violation behavior types, see Security violation behavior types.
Violation control levels
Alibaba Cloud determines whether a violation is minor, serious, or critical based on several factors. These factors include the number of violations, the user's cooperation with security requirements from regulators or Alibaba Cloud, the potential for widespread non-compliant activity, the extent of dissemination, the severity of the circumstances, and the impact of the consequences.
Information-related violations
Product classification | Corresponding control measures |
Compute products (ECS/Cloud Web Hosting/Simple Application Server) | Minor violation: Notification to rectify and URL/domain name blocking |
Serious violation: URL/domain name blocking, and unblocking is prohibited | |
Critical violation: Instance shutdown and account behavior restrictions | |
Network products (SLB/Elastic IP Address) | Minor violation: Notification to rectify and URL/domain name blocking |
Serious violation: URL/domain name blocking, and unblocking is prohibited | |
Critical violation: Network instance deactivation, backend compute instance shutdown, and account behavior restrictions | |
Object Storage Service (OSS) | Minor violation: Notification to rectify, file freezing, and restricted file access |
Serious violation: Bucket freezing | |
Critical violation: Service deactivation and account behavior restrictions | |
CDN | Minor violation: Notification to rectify and URL blocking |
Serious violation: Accelerated domain name taken offline | |
Critical violation: Service deactivation and account behavior restrictions | |
Domain Names | Minor violation: Notification to rectify and domain name resolution suspension |
Serious violation: Domain name resolution suspension and transfer prohibition | |
Critical violation: Domain name registrant profile disabled and account behavior restrictions | |
Alibaba Cloud DNS | Minor violation: Notification to rectify and DNS record locking |
Serious violation: Domain name resolution suspension | |
Critical violation: Service deactivation and account behavior restrictions | |
Edge Node Service (ENS) | Minor violation: Notification to rectify and URL/domain name blocking |
Serious violation: URL/domain name blocking, and unblocking is prohibited | |
Critical violation: Node instance shutdown and account behavior restrictions | |
Anti-DDoS | Minor violation: Notification to rectify and traffic forwarding stopped for the protected domain name |
Serious violation: Traffic forwarding stopped for the protected instance | |
Critical violation: Service shutdown and account behavior restrictions | |
Web Application Firewall (WAF) | Minor violation: Notification to rectify and URL/domain name blocking |
Serious violation: URL/domain name blocking, and unblocking is prohibited | |
Critical violation: Service shutdown and account behavior restrictions |
Behavior-related violations
Violation type | Corresponding control measures |
Network behavior | Includes but is not limited to: Port blocking, network blocking, instance shutdown, and account behavior restrictions. |
Unblocking from violation controls
For more information, see Security violation handling help and FAQ.