AWS compliance, certifications and attestations
Cloud · 41 certifications held · 5 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 2 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 3 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27701 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 9001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 22301 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 20000-1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| AI governance | |||
| ISO/IEC 42001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| US government | |||
| FedRAMP High AWS US East/West; AWS GovCloud FedRAMP Marketplace | High | FedRAMP Marketplace | Sep 23, 2026 |
| GovRAMP (StateRAMP) High AWS US East/West (Authorized, Hyperscale Inheritance Authority (HIA), Moderate); AWS GovCloud (US) (Authorized, Hyperscale Inheritance Authority (HIA), High) GovRAMP product list and vendor page | High | GovRAMP product list and vendor page | Sep 24, 2026 |
| CMMC 2.0 Held Vendor pageUnverified | Held | Vendor pageUnverified | Sep 24, 2026 |
| NIST SP 800-53 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FIPS 140 validated FIPS 140-3 18 active FIPS 140-3 modules: #5476 Amazon Linux 2023 GnuTLS Cryptographic Module; #5438 Amazon Linux 2023 OpenSSL FIPS Provider; #5429 AWS-LC Cryptographic Module (dynamic); #5369 Amazon Linux 2023 Kernel Cryptographic API; #5332 AWS Scalable Network Crypto Modules, version 1.1; #5314 AWS-LC 3 Cryp NIST CMVP and vendor page | FIPS 140-3 | NIST CMVP and vendor page | Sep 24, 2026 |
| ITAR Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| CJIS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| IRS Publication 1075 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Section 508 / VPAT Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Finance | |||
| PCI DSS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| PCI 3DS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SEC 17a-4 / FINRA 4511 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FISC (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| DORA Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Health | |||
| HIPAA (BAA) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| HITRUST Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| NHS DSPT (UK) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Life sciences (GxP) | |||
| GxP qualification Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FDA 21 CFR Part 11 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data. Covered entity of Amazon.com, Inc. Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| CSA STAR Level 2 CAIQ, certification CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| Cyber Essentials (UK) Plus Vendor page | Plus | Vendor page | Sep 24, 2026 |
| UK G-Cloud Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ENS (Spain) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| IRAP (Australia) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISMAP (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| MTCS (Singapore) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| K-ISMS (Korea) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Education | |||
| FERPA Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry | |
| Added Data Privacy Framework Covered entity of Amazon.com, Inc. | Data Privacy Framework List | |
| Upgraded FedRAMP High AWS GovCloud | FedRAMP Marketplace | |
| In process FedRAMP High AWS GovCloud | FedRAMP Marketplace | |
| Added FedRAMP Moderate AWS US East/West | FedRAMP Marketplace | |
| In process FedRAMP Moderate AWS US East/West | FedRAMP Marketplace |
About AWS
Amazon Web Services, the largest public cloud.
- Headquarters
- Seattle, United States
- Founded
- 2006
- Website
- aws.amazon.com
No public evidence found for
- ISO standards
- ISO 27799
- AI governance
- STAR AI
- US government
- DoD IL, TX-RAMP, 800-171
- Finance
- SWIFT, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI
- Health
- HDS, PHIPA
- Life sciences (GxP)
- Annex 11, CSV
- Privacy and cloud
- CBPR, EU CoC
- Regional programs
- C5, SecNum
- Education
- HECVAT, COPPA
Compare with Microsoft, Oracle, Google Cloud, IBM, Alibaba Cloud