Ask HN: Where does the liability for actions by an AWS server lie?

If a user misuses a AWS provisioned EC2 instance (such as hosting copyrighted material without permissions), does Amazon have a liability here? What if a user on an app/infrastructure (Heroku) using AWS misuses his/her instance? Is there any liability faced by Heroku/AWS?