AWS ISO 27017 FAQs

AWS's ISO 27017 certification can be downloaded here.

ISO 27017 is the newest code of practice released by the International Organization for Standardization (ISO). It provides implementation guidance on information security controls that specifically relate to cloud services.

The AWS ISO 27017 certification can be downloaded here.

AWS' adoption of the ISO 27017 guidance not only demonstrates our ongoing commitment to align with globally-recognized best practices, but also verifies that AWS has a system of highly precise controls in place that are specific to cloud services.

EY CertifyPoint, an ISO certifying agent.

If you are pursuing ISO certifications while operating part or all of your IT in the AWS cloud, you are not automatically certified by association. The AWS ISO 27017 assessment provides evidence that our security controls are aligned with the ISO 27017 guidance specific to cloud service providers.

The ISO 27017 code of practice is available for purchase online from www.iso.org.

All AWS Regions and AWS Edge Locations are within the scope of the AWS ISO 27017 assessment. This includes AWS data centers in US East (Northern Virginia), US West (Oregon), US West (Northern California), AWS GovCloud (US) (Oregon), EU (Frankfurt), EU (Ireland), Asia Pacific (Singapore), Asia Pacific (Tokyo), Asia Pacific (Sydney), China (Beijing), and South America (Sao Paulo) that support in-scope services.