# GAMESEC07-BP02 Ban accounts that are associated with bad actors
<a name="gamesec07-bp02"></a>

 If left unmitigated, abusive behaviors in a game can continue to have a negative impact on the gaming experience for others and should be mitigated as soon as possible. Implement a process to impose bans or other forms of restrictions on bad actors who are confirmed to be in violation of your terms of service.  

 **Level of risk exposed if this best practice is not established:** High 

## Implementation guidance
<a name="implementation-guidance-34"></a>

 Typically, the rules and evaluation process for determining the circumstances for imposing these types of restrictions will be determined by personnel such as a player community team or trust and safety team within your organization. After you've flagged bad actors, run a pre-determined workflow to act on the identified players.  

 For example, [AWS Step Functions](https://aws.amazon.com/step-functions/) and [AWS Lambda](https://aws.amazon.com/lambda/) functions can be used to run an automated workflow that accepts a batch of player accounts as input. The workflow then updates entries in an [Amazon DynamoDB](https://aws.amazon.com/dynamodb) table called Bans, which can include details about the player account, the ban reason, and duration.  

 Depending on the design of your game and account management system and the type of abuse that you encounter from bad actors, maintain a banning system of record that is separate from your account management system. You may not want to turn off the player's account from your account management system, opting instead to simply turn off their ability to play your game. This can be useful in situations where the player's account credentials are used to access multiple games with different terms of service or policies. 

### Implementation steps
<a name="implementation-steps-33"></a>
+  Define and enforce policies for responding to abusive behaviors from bad actors. 
+  Use AWS services to automate your responses to bad actors.  

### Resources
<a name="resources-3"></a>
+  [AWS Security Incident Response Technical Guide](https://docs.aws.amazon.com/whitepapers/latest/aws-security-incident-response-guide/aws-security-incident-response-guide.html) 
+  [AWS Machine Learning Blog: Detect real and live users and deter bad actors using Amazon Rekognition Face Liveness](https://aws.amazon.com/blogs/machine-learning/detect-real-and-live-users-and-deter-bad-actors-using-amazon-rekognition-face-liveness/) 
+  [AWS Solutions for Games: Community Health](https://aws.amazon.com/solutions/games/community-health/)