# Managing agreements in AWS Artifact
Managing agreements

You can use AWS Artifact to review and manage agreements for your AWS account or organization. For example, companies that are subject to the Health Insurance Portability and Accountability Act (HIPAA) typically require a Business Associate Addendum (BAA) agreement with AWS to ensure that protected health information (PHI) is appropriately safeguarded. In the AWS Artifact console, you can review and accept such agreements, and you can designate an AWS account that can legally process PHI.

If you use AWS Organizations, you can accept agreements, such as a BAA with AWS, on behalf of all AWS accounts in your organization. All existing and subsequent member accounts are automatically covered by the agreement and can legally process PHI.

You can also use AWS Artifact to confirm that your AWS account or organization has accepted an agreement, and to review the terms of an accepted agreement to understand your obligations. If your account or organization no longer needs to use an accepted agreement, then you can use AWS Artifact to terminate the agreement. If you terminate the agreement but later realize that you need it, then you can activate the agreement again.

**Topics**
+ [Accepting account agreements](accept-single-agreement.md)
+ [Terminating account agreements](terminate-single-agreement.md)
+ [Accepting organization agreements](accept-org-agreement.md)
+ [Terminating organization agreements](terminate-org-agreement.md)
+ [Offline agreements](manage-offline-agreement.md)

# Accepting agreements for your AWS account in AWS Artifact
Accepting account agreements

You can use the AWS Artifact console to review and accept agreements with AWS for your AWS account.

**Important**  
Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.

**Required permissions**  
If you're an administrator of an account, then you can grant IAM users and federated users with the permissions to access and manage one or more of your agreements. By default, only users with administrative privileges can accept an agreement. To accept an agreement, IAM and federated users must have the required [permissions](example-iam-policies.md#example-policy-manage-single-account-agreements).

For more information, see [Identity and access management in AWS Artifact](security-iam.md).

**To accept an agreement with AWS**

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. On the AWS Artifact navigation pane, choose **Agreements**.

1. Choose the **Account agreements** tab.

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. In the navigation pane, choose **Agreements**.

1. On the **Agreements** page, do either of the following:
   + To accept an agreement only for your account, choose the **Account agreements** tab.
   + To accept an agreement on behalf of your organization, choose the **Organization agreements** tab.

1. Select an agreement, and then choose **Download agreement**.

   The **Accept NDA to download report** dialog box appears.

1. Before you can download the agreement that you selected, you must first accept the terms of the AWS Artifact Nondisclosure Agreement (AWS Artifact NDA).

   1. In the **Accept NDA to download report** dialog box, review the AWS Artifact NDA.

   1. (Optional) To print a copy of the AWS Artifact NDA (or to save it as a PDF), choose **Print NDA**.

   1. Select **I have read and agree to all the terms of the NDA.**

   1. To accept the AWS Artifact NDA and to download a PDF of the agreement that you selected, choose **Accept NDA and download**.

1. In a PDF viewer, review the agreement PDF that you downloaded.

1. In the AWS Artifact console, with the agreement selected, choose **Accept agreement**.

1. In the **Accept agreement** dialog box, do the following:

   1. Review the agreement.

   1. Select **I agree to all of these terms and conditions**.

   1. Choose **Accept agreement**.

1. Choose **Accept** to accept the agreement for your account.

# Terminating agreements for your AWS account in AWS Artifact
Terminating account agreements

If you used the AWS Artifact console to [accept an agreement for a single AWS account](accept-single-agreement.md), then you can use the console to terminate that agreement. Otherwise, see [Offline agreements in AWS Artifact](manage-offline-agreement.md).

**Required permissions**  
To terminate an agreement, IAM and federated users must have the required [permissions](example-iam-policies.md#example-policy-manage-terminate-agreements).

For more information, see [Identity and access management in AWS Artifact](security-iam.md).

**To terminate your online agreement with AWS**

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. On the AWS Artifact navigation pane, choose **Agreements**.

1. Choose the **Account agreements** tab.

1. Select the agreement and choose **Terminate agreement**.

1. Select all checkboxes to indicate that you agree to terminate the agreement.

1. Choose **Terminate**. When prompted for confirmation, choose **Terminate**.

# Accepting agreements for your organization in AWS Artifact
Accepting organization agreements

If you're the owner of the management account of an AWS Organizations organization, then you can accept an agreement with AWS on behalf of all AWS accounts in your organization.

**Important**  
Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.

AWS Organizations has two available feature sets: *consolidated billing features* and *all features*. To use AWS Artifact for your organization, the organization that you belong to must be enabled for [all features](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set). If your organization is configured only for consolidated billing, see [Enabling all features in your organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html) in the *AWS Organizations User Guide*.

To accept or terminate organization agreements, you must be signed in to the management account with the correct AWS Artifact permissions. Users of member accounts that have `organizations:DescribeOrganization` permissions can view the organization agreements that are accepted on their behalf.

For more information, see [Managing accounts in an organization with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts.html) in the *AWS Organizations User Guide*.

**Required permissions**  
To accept an agreement, the owner of the management account must have the required [permissions](example-iam-policies.md#example-policy-organizational-agreements).

For more information, see [Identity and access management in AWS Artifact](security-iam.md).

**To accept an agreement for an organization**

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. On the AWS Artifact dashboard, choose **Agreements**.

1. Choose the **Organization agreements** tab.

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. In the navigation pane, choose **Agreements**.

1. On the **Agreements** page, do either of the following:
   + To accept an agreement only for your account, choose the **Account agreements** tab.
   + To accept an agreement on behalf of your organization, choose the **Organization agreements** tab.

1. Select an agreement, and then choose **Download agreement**.

   The **Accept NDA to download report** dialog box appears.

1. Before you can download the agreement that you selected, you must first accept the terms of the AWS Artifact Nondisclosure Agreement (AWS Artifact NDA).

   1. In the **Accept NDA to download report** dialog box, review the AWS Artifact NDA.

   1. (Optional) To print a copy of the AWS Artifact NDA (or to save it as a PDF), choose **Print NDA**.

   1. Select **I have read and agree to all the terms of the NDA.**

   1. To accept the AWS Artifact NDA and to download a PDF of the agreement that you selected, choose **Accept NDA and download**.

1. In a PDF viewer, review the agreement PDF that you downloaded.

1. In the AWS Artifact console, with the agreement selected, choose **Accept agreement**.

1. In the **Accept agreement** dialog box, do the following:

   1. Review the agreement.

   1. Select **I agree to all of these terms and conditions**.

   1. Choose **Accept agreement**.

1. Choose **Accept** to accept the agreement for all existing and future accounts in your organization.

# Terminating agreements for your organization in AWS Artifact
Terminating organization agreements

If you used the AWS Artifact console to [accept an agreement on behalf of all member accounts in an organization in AWS Organizations](accept-org-agreement.md), then you can use the console to terminate that agreement. Otherwise, see [Offline agreements in AWS Artifact](manage-offline-agreement.md).

If a member account is removed from an organization, then that member account is longer covered by organization agreements. Before removing member accounts from an organization, a management account administrator should communicate this to member accounts so that they can put new agreements in place if necessary. You can view a list of active organization agreements in the AWS Artifact console on the **Agreements** page, under [Organization agreements](https://console.aws.amazon.com/artifact/home?#!/agreements?tab=organizationAgreements).

For more information about AWS Organizations, see [Managing accounts in an organization with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts.html) in the *AWS Organizations User Guide*.

**Required permissions**  
To terminate an agreement, the owner of the management account must have the required [permissions](example-iam-policies.md#example-policy-manage-terminate-agreements).

For more information, see [Identity and access management in AWS Artifact](security-iam.md).

**To terminate your online organization agreement with AWS**

1. Open the AWS Artifact console at [https://console.aws.amazon.com/artifact/](https://console.aws.amazon.com/artifact/). 

1. On the AWS Artifact dashboard, choose **Agreements**.

1. Choose the **Organization agreements** tab.

1. Select the agreement and choose **Terminate agreement**.

1. Select all checkboxes to indicate that you agree to terminate the agreement.

1. Choose **Terminate**. When prompted for confirmation, choose **Terminate**.

# Offline agreements in AWS Artifact
Offline agreements

If you have an existing offline agreement, AWS Artifact displays the agreements that you accepted offline. For example, the console might display the **Offline Business Associate Addendum (BAA)** with an **Active** status. The active status indicates that the agreement was accepted. To terminate an offline agreement, see the termination guidelines and instructions that are included in your agreement.

For more information, see [Identity and access management in AWS Artifact](security-iam.md).