diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..9d3b4f2
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+## Reporting a Vulnerability
+
+If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security
+via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) or directly via email to aws-security@amazon.com.
+Please do **not** create a public GitHub issue.