AWS Security Blog

AWS Updated Its ISO Certifications and Now Has 67 Services Under ISO Compliance

AWS has updated its certifications against ISO 9001, ISO 27001, ISO 27017, and ISO 27018 standards, bringing the total to 67 services now under ISO compliance. We added the following 29 services this cycle:

• HAQM Aurora • HAQM S3 Transfer Acceleration • AWS Lambda@Edge
• HAQM Cloud Directory • HAQM SageMaker • AWS Managed Services
• HAQM CloudWatch Logs • HAQM Simple Notification Service • AWS OpsWorks Stacks
• HAQM Cognito • Auto Scaling • AWS Shield
• HAQM Connect • AWS Batch • AWS Snowball Edge
• HAQM Elastic Container Registry • AWS CodeBuild • AWS Snowmobile
• HAQM Inspector • AWS CodeCommit • AWS Step Functions
• HAQM Kinesis Data Streams • AWS CodeDeploy • AWS Systems Manager (formerly HAQM EC2 Systems Manager)
• HAQM Macie • AWS CodePipeline • AWS X-Ray
• HAQM QuickSight • AWS IoT Core

For the complete list of services under ISO compliance, see AWS Services in Scope by Compliance Program.

AWS maintains certifications through extensive audits of its controls to ensure that information security risks that affect the confidentiality, integrity, and availability of company and customer information are appropriately managed.

You can download copies of the AWS ISO certificates that contain AWS’s in-scope services and Regions, and use these certificates to jump-start your own certification efforts:

AWS does not increase service costs in any AWS Region as a result of updating its certifications.

To learn more about compliance in the AWS Cloud, see AWS Cloud Compliance.

Want more AWS Security how-to content, news, and feature announcements? Follow us on Twitter.

Author

Chad Woolf

Chad joined HAQM in 2010 and built the AWS compliance functions from the ground up, including audit and certifications, privacy, contract compliance, control automation engineering and security process monitoring. Chad’s work also includes enabling public sector and regulated industry adoption of the AWS cloud, compliance with complex privacy regulations such as GDPR and operating a trade and product compliance team in conjunction with global region expansion. Prior to joining AWS, Chad spent 12 years with Ernst & Young as a Senior Manager working directly with Fortune 100 companies consulting on IT process, security, risk, and vendor management advisory work, as well as designing and deploying global security and assurance software solutions. Chad holds a Masters of Information Systems Management and a Bachelors of Accounting from Brigham Young University, Utah. Follow Chad on Twitter.