Acceptable Use Policy

1. Purpose & Scope

This Acceptable Use Policy defines acceptable and prohibited activities on the AWS Student Builder Group at USCS website, API services, and associated cloud environments.

2. Prohibited Security Activities

Users are strictly prohibited from engaging in:

• Unauthorized Access: Attempting to access accounts, admin dashboards, or server resources without explicit permission.
• Credential Abuse & Account Takeover: Attempting to forge Firebase Auth tokens, manipulate client role assertions, or harvest user credentials.
• Malicious Payloads: Uploading or transmitting viruses, malware, ransomware, or malicious scripts.
• Infrastructure Attacks: Launching Denial of Service (DoS/DDoS) attacks, brute-force login requests, or automated scraping against our API endpoints.
• Permission Bypass: Attempting to circumvent server-side authorization headers, DynamoDB query restrictions, or role-based access rules.

3. Cloud Resource & Sandbox Usage

AWS credentials, temporary sandbox access, and cloud credits provided during workshops or hackathons must be used strictly for designated educational tasks. Cryptocurrency mining, commercial hosting, or unauthorized cloud bandwidth consumption will result in immediate account revocation.

4. Authorized Security Reporting

Responsible security research is welcomed. Automated scanning or intrusive penetration testing against production servers requires prior written authorization. Report vulnerability findings directly to aws-sbg@uscs.dr5t.tech.