Compliance Resources

Essentials and Best Practices | Guides and Workbooks | Privacy | Training 

Essentials and Best Practices Guides and Workbooks Privacy Training

Cloud Audit Academy

Learn skills and best practices to audit for security in the cloud using a risk-based approach.

Learn More »

AWS Compliance Solutions Guide

View our repository of resources and processes needed to perform compliance responsibilities on AWS.

Learn More »

Essentials and Best Practices

AWS Compliance Quick Reference Guide
AWS Logical Separation Handbook
AWS Operational Resilience
AWS Policy Perspectives: Data Residency
AWS Risk and Compliance
CSA Consensus Assessments Initiative Questionnaire
Data Classification
Introduction to AWS Security by Design

Guides and Workbooks

Amazon Redshift Security Best Practices
Architecting Amazon EKS for PCI DSS Compliance
Architecting Amazon EKS and Bottlerocket for PCI DSS Compliance
Architecting for HIPAA Security and Compliance on Amazon Web Services
Architecting for PCI DSS Scoping and Segmentation on AWS
Architecting on Amazon ECS for PCI DSS Compliance
Argentina Personal Data Protection Law Disposition No.11/2006 Workbook
AWS Brazil Public Sector – Public Administration Compliance Guide
AWS CIS Amazon Web Services Three-tier Web
AWS CIS Foundations Benchmarks
AWS Customer Compliance Guide
AWS Executive Overview for Banks in India
AWS HKMA Virtual Banking User Guide
AWS PCI 3DS Whitepaper
AWS Private Certificate Authority - Matter PKI Compliance Guide
AWS Response to CACP Information and Communication Technology Sub-Committee
AWS Services and Customer Responsibility Matrix for Alignment to the CSF
AWS User Guide for Federally Regulated Financial Institutions in Canada
AWS User Guide to Canada's Controlled Goods Program (CGP)
AWS User Guide to the Central Bank of Bahrain Rulebook
AWS User Guide to Financial Services Regulations in Argentina
AWS User Guide to Financial Services Regulations & Guidelines in Australia
AWS User Guide to Financial Services Regulations in Brazil
AWS User Guide to Financial Services Regulations in Chile
AWS User Guide to Financial Services Regulations and Guidelines in Indonesia
AWS User Guide to Financial Services Regulations and Guidelines in New Zealand
AWS User Guide to Financial Services Regulations in the Philippines
AWS User Guide to Financial Services Regulations & Guidelines in Singapore
AWS User Guide to the Hong Kong Insurance Authority on Outsourcing and Use of Internet for Insurance Activities Guidelines
AWS User Guide to the Hong Kong Monetary Authority on Outsourcing and General Principles for Technology Risk Management Supervisory Policy Manuals
AWS User Guide to Support Compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standards
AWS User Guide to Telecommunications Regulations in Germany
Considerations for Economic Security Promotion Act in Japan (Japanese version)
Considerations on the UK Telecommunications (Security) Act
The Cyber Security Agency (CSA) Cyber Trust Mark certification Cloud Companion Guide
Data Backup in Mexico
DoD-Compliant Implementations in the AWS Cloud
FERPA Compliance on AWS
GxP Systems on AWS
Implications of the Code of Conduct for CISPE
Internal Revenue Service (IRS) Publication 1075 Compliance in AWS
Open Data on AWS
Navigating Compliance with EU Data Transfer Requirements
Navigating HCLS Regulatory and Compliance Requirements on AWS
Navigating HKMA Compliance on AWS
Navigating Hong Kong SFC Compliance on AWS
Navigating Indonesia Government Regulation No. 71 Considerations on AWS
Navigating the Israeli Ministry of Health Cloud Computing Circular on AWS
NERC CIP Standards for BES Cyber System Information on AWS
NIS 2 Considerations for AWS Customers
NIST Cybersecurity Framework (CSF) 2.0  
Payment Card Industry Data Security Standard (PCI DSS) v4.0 on AWS Compliance Guide
SWIFT Customer Security Controls Framework (v2022) on AWS
UK Healthcare and Life Sciences Compliance on AWS
U.S. Securities and Exchange Commission’s (SEC) Office of Compliance Inspections and Examinations (OCIE) Cybersecurity Initiative Workbook
Understanding the ASD’s Cloud Computing Security for Tenants in the Context of AWS

Privacy

Data Protection 
EU Data Protection 
Navigating GDPR Compliance on AWS
Navigating LGPD Compliance on AWS
Preparing for the California Consumer Privacy Act
Using AWS in the Context of Australian Privacy Considerations
Using AWS in the Context of Common Privacy & Data Protection Considerations
Using AWS in the Context of Hong Kong Privacy Considerations
Using AWS in the Context of Japan Privacy Considerations
Using AWS in the Context of Malaysian Privacy Considerations
Using AWS in the Context of NCSC UK’s Cloud Security Principles
Using AWS in the Context of New Zealand Privacy Considerations
Using AWS in the Context of Philippines Privacy Considerations
Using AWS in the Context of Singapore Privacy Considerations
Using AWS in the Context of South African Privacy Considerations
Using AWS in the Context of Thai Privacy Considerations

Training

AWS Security Fundamentals

Security Operations on AWS

Introduction to AWS Identity and Access Management (IAM)

Introduction to Data Encryption

Other Compliance Resources

Cloud Audit Academy

Learn skills and best practices to audit for security in the cloud using a risk-based approach.

Learn More »

AWS Compliance Solutions Guide

View our repository of resources and processes needed to perform compliance responsibilities on AWS.

Learn More »
 Latest News  Services in Scope  AWS Security Blog  AWS Security Assurance Services  Security Resources  Testimonials
View whitepapers available in other languages »
Have Questions? Connect with an AWS Business Representative
Exploring compliance roles?
Apply today »
Want AWS Compliance updates?
Follow us on Twitter »