Compliance validation for Amazon EC2 - Amazon Elastic Compute Cloud
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Compliance validation for Amazon EC2

Third-party auditors assess the security and compliance of Amazon Web Services as part of multiple Amazon compliance programs, such as SOC, PCI, FedRAMP, and HIPAA.

To learn whether or other Amazon Web Services are within the scope of specific compliance programs, see Amazon Web Services in Scope by Compliance Program. For general information, see Amazon Web Services Compliance Programs.

You can download third-party audit reports using Amazon Artifact. For more information, see Downloading Reports in Amazon Artifact.

Your compliance responsibility when using Amazon Web Services is determined by the sensitivity of your data, your company's compliance objectives, and applicable laws and regulations. Amazon provides the following resources to help with compliance:

Amazon EC2 provides Amazon Machine Images (AMI) for Microsoft Windows Server to help you meet the compliance standards of the Security Technical Implementation Guide (STIG). These AMIs are pre-configured with a number of STIG standards to help you get started with your deployments while meeting STIG compliance standards. For more information, see Amazon EC2 Windows Server AMIs for STIG compliance.