AWS Compliance Programs
Global
Americas
CJIS
Criminal Justice Information Services
FISMA
Federal Information Security Management
MPAA
Protected Media Content
DoD SRG
DoD Data
Processing
GxP
Quality Guidelines and Regulations
/automating-security-best-practices-solution-icon%20(1).df6223b44fcba437b74f2170677baf86832ef22d.png "automating-security-best-practices-solution-icon (1)")
NIST
National Institute of Standards and Technology
FedRAMP
Government Data Standards
HIPAA
Protected Health Information
PIPEDA
Canada’s Federal Private Sector Privacy Legislation
FERPA
Educational Privacy Act
HITRUST CSF
Health Information Trust Alliance Common Security Framework
SEC Rule 17a-4(f)
Financial Data Standards
FIPS
Government Security Standards
ITAR
International Arms Regulations
VPAT / Section 508
Accessibility Standards
Asia Pacific
Certifications / Attestations:
Compliance certifications and attestations are assessed by a third-party, independent auditor and result in a certification, audit report, or attestation of compliance.
Laws / Regulations / Privacy:
AWS customers remain responsible for complying with applicable compliance laws and regulations. In some cases, AWS offers functionality (such as security features), enablers, and legal agreements (such as the AWS Data Processing Agreement and Business Associate Addendum) to support customer compliance.
No formal certification is available to (or distributable by) a cloud service provider within these law and regulatory domains.
- Argentina Data Privacy (PDPA)
- Australia Data Privacy (APPs)
- CCPA – California
- CISPE
- CLOUD Act
- FERPA
- FOIPPA – British Columbia
- GDPR
- HIA – Alberta
- HIPAA
- HITECH
- Hong Kong Data Privacy (PDPO)
- India Data Privacy
- Indonesia Data Privacy
- IRS 1075
- ITAR
- Japan Data Privacy (APPI)
- Korea Data Privacy
- Malaysia Data Privacy (PDPA)
- NB PHIPAA – New Brunswick
- New Zealand Data Privacy
- NL PHIA – Newfoundland and Labrador
- PHIA – Nova Scotia
- Philippines Data Privacy
- PHIPA – Ontario
- PIPEDA – Canada
- Singapore Data Privacy (PDPA)
- Spanish DPA Authorization
- Taiwan Data Privacy (PDPA)
- Thailand Data Privacy (PDPA)
- U.K. DPA – 1988
- VPAT / Section 508
Alignments / Frameworks:
Compliance alignments and frameworks include published security or compliance requirements for a specific purpose, such as a specific industry or function. AWS provides functionality (such as security features) and enablers (including compliance playbooks, mapping documents, and whitepapers) for these types of programs.
Requirements under specific alignments and frameworks may not be subject to certification or attestation; however, some alignments and frameworks are covered by other compliance programs.
