Compliance Resources

Essentials and Best Practices | Guides and Workbooks | Privacy | Training 

Essentials and Best Practices Guides and Workbooks Privacy Training

Cloud Audit Academy

Learn skills and best practices to audit for security in the cloud using a risk-based approach.

Learn More »

AWS Compliance Solutions Guide

View our repository of resources and processes needed to perform compliance responsibilities on AWS.

Learn More »

Essentials and Best Practices

AWS Compliance Quick Reference Guide
AWS Logical Separation Handbook
AWS Operational Resilience
AWS Policy Perspectives: Data Residency
AWS Risk and Compliance
CSA Consensus Assessments Initiative Questionnaire
Data Classification
Introduction to AWS Security by Design

Guides and Workbooks

Architecting Amazon EKS for PCI DSS Compliance
Architecting for HIPAA Security and Compliance on Amazon Web Services
Architecting for PCI DSS Scoping and Segmentation on AWS
Architecting on Amazon ECS for PCI DSS Compliance
Argentina Personal Data Protection Law Disposition No.11/2006 Workbook
AWS CIS Amazon Web Services Three-tier Web
AWS CIS Foundations Benchmarks
AWS Executive Overview for Banks in India
AWS HKMA Virtual Banking User Guide
AWS PCI 3DS Whitepaper
AWS Private Certificate Authority - Matter PKI Compliance Guide
AWS Response to CACP Information and Communication Technology Sub-Committee
AWS Services and Customer Responsibility Matrix for Alignment to the CSF
AWS User Guide to Canada's Controlled Goods Program (CGP)
AWS User Guide to the Central Bank of Bahrain Rulebook
AWS User Guide to Financial Services Regulations in Argentina
AWS User Guide to Financial Services Regulations & Guidelines in Australia
AWS User Guide to Financial Services Regulations in Brazil
AWS User Guide to Financial Services Regulations and Guidelines in New Zealand 
AWS User Guide to Financial Services Regulations & Guidelines in Singapore
AWS User Guide to Financial Services Regulations and Guidelines in Switzerland
AWS User Guide to the Hong Kong Insurance Authority on Outsourcing and Use of Internet for Insurance Activities Guidelines
AWS User Guide to the Hong Kong Monetary Authority on Outsourcing and General Principles for Technology Risk Management Supervisory Policy Manuals
AWS User Guide to Support Compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards
DoD-Compliant Implementations in the AWS Cloud
FERPA Compliance on AWS
GxP Systems on AWS
Implications of the Code of Conduct for CISPE
Internal Revenue Service (IRS) Publication 1075 Compliance in AWS
Open Data on AWS
Navigating Compliance with EU Data Transfer Requirements
Navigating HCLS Regulatory and Compliance Requirements on AWS
Navigating Hong Kong SFC Compliance on AWS 
Navigating Indonesia Government Regulation No. 71 Considerations on AWS
Navigating the Israeli Ministry of Health Cloud Computing Circular on AWS
NERC CIP Standards for BES Cyber System Information on AWS
NIST Cybersecurity Framework (CSF)
Payment Card Industry Data Security Standard (PCI DSS) 3.2.1on AWS Compliance Guide
SWIFT Customer Security Controls Framework (v2022) on AWS 
UK Healthcare and Life Sciences Compliance on AWS
U.S. Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) Cybersecurity Initiative Workbook
Understanding the ASD’s Cloud Computing Security for Tenants in the Context of AWS

Privacy

Data Protection 
EU Data Protection 
Navigating GDPR Compliance on AWS
Navigating LGPD Compliance on AWS
Preparing for the California Consumer Privacy Act
Using AWS in the Context of Australian Privacy Considerations
Using AWS in the Context of Common Privacy & Data Protection Considerations
Using AWS in the Context of Hong Kong Privacy Considerations
Using AWS in the Context of Japan Privacy Considerations
Using AWS in the Context of Malaysian Privacy Considerations
Using AWS in the Context of NCSC UK’s Cloud Security Principles
Using AWS in the Context of New Zealand Privacy Considerations
Using AWS in the Context of Philippines Privacy Considerations
Using AWS in the Context of Singapore Privacy Considerations
Using AWS in the Context of South African Privacy Considerations
Using AWS in the Context of Thai Privacy Considerations

Training

AWS Security Fundamentals

Security Operations on AWS

Introduction to AWS Identity and Access Management (IAM)

Introduction to Data Encryption

Other Compliance Resources

Cloud Audit Academy

Learn skills and best practices to audit for security in the cloud using a risk-based approach.

Learn More »

AWS Compliance Solutions Guide

View our repository of resources and processes needed to perform compliance responsibilities on AWS.

Learn More »
 Latest News  Services in Scope  AWS Security Blog  Security Resources  Testimonials
View whitepapers available in other languages »
Have Questions? Connect with an AWS Business Representative
Exploring compliance roles?
Apply today »
Want AWS Compliance updates?
Follow us on Twitter »