Skip to main content

AWS Compliance

Learn more about our compliance offerings and why we serve our customers best

Overview

AWS supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171, helping customers satisfy compliance requirements around the globe.

Read the AWS Risk and Compliance whitepaper »

View recent announcements »

Benefits of Compliance on AWS

Learn more about the certifications, regulations, and frameworks AWS aligns with to support customer compliance.

AWS regularly achieves third-party validation for thousands of global compliance requirements that we continually monitor to help you meet security and compliance standards for finance, retail, healthcare, government, and beyond.

These controls strengthen your own compliance and certification programs, while also receiving access to tools you can use to reduce your cost and time to run your own specific security assurance requirements.

Traditional assurance methods become challenging with scale. Reduce risk and enable scale by using our activity monitoring services that detect configuration changes and security events across your system, even integrating our services with your existing solutions to simplify your operations and compliance reporting.

Get on-demand access to AWS and ISV security and compliance reports by using AWS Artifact. Find auditor-issued reports, certifications, accreditations, and other third-party attestations of AWS in a comprehensive resource.

Compliance is a Shared Responsibility

Security and Compliance is a shared responsibility between AWS and the customer. This shared model can help relieve the customer’s operational burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates. The customer assumes responsibility and management of the guest operating system (including updates and security patches), other associated application software as well as the configuration of the AWS provided security group firewall.

Missing alt text value

Meeting Your Compliance Goals on AWS

AWS Audit Manager

Continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards.

Amazon GuardDuty

Protect. your AWS accounts and workloads with intelligent threat detection and continuous monitoring.

AWS Artifact

No cost, self-service portal for on-demand access to AWS’ compliance reports.

AWS Security Assurance Services

Looking for compliance support in your environment? AWS can help your team align on compliance requirements across industries.

Missing alt text value

Data Privacy

AWS gives customers ownership and control over their customer content by design through simple, but powerful tools that allow customers to determine where their customer content will be stored, secure their customer content in transit or at rest, and manage access to AWS services and resources.

Missing alt text value

Information Requests

We know customers care deeply about privacy and data security, and we optimize our work to get these issues right for customers.

Missing alt text value