AWS Services in Scope by Compliance Program
Payment Card Industry Standards
We include generally available services in the scope of our compliance efforts based on the expected use case, feedback and demand. If a service is not currently listed as in scope of the most recent assessment, it does not mean that you cannot use the service. It is part of the shared responsibility for your organization to determine the nature of the data. Based on the nature of what you are building on AWS, you should determine if the service will process or store customer data and how it will or will not impact the compliance of your customer data environment.
We encourage you to discuss your workload objectives and goals with your AWS account team; they will be able to evaluate your proposed use case and architecture, and how our security and compliance processes overlay that architecture. Need to connect with an AWS business representative?
This webpage provides a list of AWS Services in Scope of AWS assurance programs. Unless specifically excluded, generally available features of each of the services are considered in scope of the assurance programs, and are reviewed and tested at the next opportunity for assessment. Refer to the AWS Documentation for the features of an AWS service.
✓ = This service is currently in scope and is reflected in current reports. For more specific details on status, please refer to each compliance program tab below.
PCI
Last updated: September 19, 2025
SERVICES / PROGRAMS |
||||
|---|---|---|---|---|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
Amazon Augmented AI [excludes Public Workforce and Vendor Workforce for all features] |
✓ |
✓ |
|
|
Amazon Bedrock [excludes Amazon Bedrock Marketplace] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of Presences] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
Amazon Elastic Container Service (ECS) [both Fargate and EC2 launch types] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
Amazon Elastic Kubernetes Service (EKS) [both Fargate and EC2 launch types] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
Amazon SageMaker AI [formerly Amazon Sagemaker, excludes Studio Lab, Public Workforce and Vendor Workforce for all features] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
AWS Directory Service [excludes Simple AD] |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
✓ |
✓ |
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
AWS Security Hub CSPM (formerly AWS Security Hub) |
✓ |
✓ |
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|
|
✓ |
✓ |
|
|