ISO and CSA STAR Certified

AWS ISO and CSA STAR Certifications and Services

AWS has certification for compliance with ISO/IEC 27001:2022, 27017:2015, 27018:2019, 27701:2019, 22301:2019, 20000-1:2018, 9001:2015, and CSA STAR CCM v4.0. AWS services that are covered under the certifications are listed below.

Unless specifically excluded, all features of a services are in scope. Refer to AWS Documentation to see service features.

Last Updated: November 24, 2023

AWS Services 
Amazon API Gateway
Amazon AppFlow 
Amazon AppStream 2.0
Amazon Athena
Amazon Augmented AI [Excludes Public Workforce and Vendor Workforce for all features]
Amazon Bedrock
Amazon Chime
Amazon Chime SDK
Amazon Cloud Directory
Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of Presences]
Amazon CloudWatch
Amazon CloudWatch Logs
Amazon Cognito
Amazon Comprehend
Amazon Comprehend Medical
Amazon Connect
Amazon Detective
Amazon DevOps Guru 
Amazon DocumentDB [with MongoDB compatibility]
Amazon DynamoDB
Amazon EC2 Auto Scaling
Amazon Elastic Block Store (EBS)
Amazon Elastic Compute Cloud (EC2)
Amazon Elastic Container Registry (ECR)
Amazon Elastic Container Service - [both Fargate and EC2 launch types]
Amazon Elastic File System (EFS)
Amazon Elastic Kubernetes Service (EKS) [both Fargate and EC2 launch types]
Amazon Elastic MapReduce (EMR)
Amazon ElastiCache
Amazon EventBridge
Amazon FinSpace 
Amazon Forecast 
Amazon Fraud Detector 
Amazon FSx
Amazon GuardDuty
Amazon Inspector
Amazon Inspector Classic
Amazon Kendra
Amazon Keyspaces (for Apache Cassandra)
Amazon Managed Service for Apache Flink
Amazon Kinesis Data Firehose
Amazon Kinesis Data Streams
Amazon Kinesis Video Streams
Amazon Lex 
Amazon Location Service 
Amazon Macie
Amazon Managed Service for Prometheus
Amazon Managed Streaming for Apache Kafka
Amazon Managed Workflows for Apache Airflow
Amazon MemoryDB for Redis
Amazon MQ
Amazon Neptune
Amazon OpenSearch Service
Amazon Personalize
Amazon Pinpoint
Amazon Polly
Amazon Quantum Ledger Database (QLDB)
Amazon QuickSight
Amazon Redshift
Amazon Rekognition
Amazon Relational Database Service (RDS)
Amazon Route 53
Amazon Route 53 Resolver
Amazon S3 Glacier
Amazon SageMaker [Excludes Studio Lab, Public Workforce and Vendor Workforce for all features]
Amazon Simple Email Service (SES)
Amazon Simple Notification Service (SNS)
Amazon Simple Queue Service (SQS)
Amazon Simple Storage Service (S3)
Amazon Simple Workflow Service (SWF)
Amazon SimpleDB
Amazon Textract
Amazon Timestream
Amazon Transcribe
Amazon Translate
Amazon Virtual Private Cloud (VPC)
Amazon WorkDocs
Amazon WorkMail
Amazon WorkSpaces
Amazon Workspaces Web 
AWS Amplify
AWS App Mesh 
AWS App Runner 
AWS AppFabric
AWS Application Migration Service
AWS AppSync
AWS Artifact
AWS Audit Manager
AWS Backup
AWS Batch
AWS Certificate Manager (ACM)
AWS Chatbot
AWS Clean Rooms
AWS Cloud Map
AWS Cloud9
AWS CloudFormation
AWS CloudShell 
AWS CloudTrail
AWS CodeBuild
AWS CodeCommit
AWS CodeDeploy
AWS CodePipeline
AWS CodeStar
AWS Config
AWS Control Tower 
AWS Data Exchange
AWS Database Migration Service (DMS)
AWS DataSync
AWS Device Farm
AWS Direct Connect
AWS Directory Service [Excludes Simple AD]
AWS Elastic Beanstalk
AWS Elastic Disaster Recovery 
AWS Elemental MediaConnect
AWS Elemental MediaConvert
AWS Elemental MediaLive
AWS Fault Injection Simulator
AWS Firewall Manager
AWS Global Accelerator
AWS Glue
AWS Glue DataBrew
AWS Ground Station
AWS Health Dashboard 
AWS HealthImaging
AWS Healthlake
AWS HealthOmics
AWS IAM Identity Center
AWS Identity and Access Management (IAM)
AWS IoT 1-Click
AWS IoT Analytics
AWS IoT Core 
AWS IoT Device Defender
AWS IoT Device Management
AWS IoT Events 
AWS IoT Greengrass
AWS IoT SiteWise 
AWS IoT TwinMaker
AWS Key Management Service (KMS)
AWS Lake Formation 
AWS Lambda
AWS License Manager
AWS Mainframe Modernization
AWS Managed Services
AWS Network Firewall 
AWS OpsWorks [includes Chef Automate, Puppet Enterprise]
AWS OpsWorks Stacks
AWS Organizations
AWS Outposts
AWS Private Certificate Authority 
AWS Professional Services (Only in scope of ISO 27001) 
AWS Resilience Hub
AWS Resource Access Manager (RAM)
AWS Resource Groups
AWS RoboMaker
AWS Secrets Manager
AWS Security Assurance Services LLC (Only in scope of ISO 27001)
AWS Security Hub
AWS Serverless Application Repository
AWS Service Catalog
AWS Shield
AWS Signer
AWS Snowball
AWS Snowball Edge
AWS Snowmobile
AWS Step Functions
AWS Storage Gateway
AWS Systems Manager
AWS Transfer Family
AWS Trusted Advisor
AWS User Notifications
AWS Wickr
EC2 Image Builder 
Elastic Load Balancing (ELB)
VM Import/Export

*Namespaces help you identify services across your AWS environment. For example, when you create IAM policies, work with Amazon Resource Names (ARNs), and read AWS CloudTrail logs. Learn more about namespaces on the documentation page.

Have Questions? Connect with an AWS Business Representative
Exploring compliance roles?
Apply today »
Want AWS Compliance updates?
Follow us on Twitter »