System and Organization Controls 3 (SOC 3) Report Report ...

System and Organization Controls 3 (SOC 3) Report Report on the Amazon Web Services System

Relevant to Security, Availability, Confidentiality, and Privacy

For the Period October 1, 2022 ? September 30, 2023

?2023 , Inc. or its affiliates 1

Amazon Web Services 410 Terry Avenue North Seattle, WA 98109-5210 Management's Report of Its Assertions on the Effectiveness of Its Controls Over the Amazon Web Services System Based on the Trust Services Criteria for Security, Availability, Confidentiality, and Privacy

We, as management of, Amazon Web Services, Inc., are responsible for: ? Identifying the Amazon Web Services System (System) and describing the boundaries of the System, which are presented in Attachment A ? Identifying our principal service commitments and system requirements ? Identifying the risks that would threaten the achievement of our principal service commitments and system requirements that are the objectives of our system, which are presented in Attachment A ? Identifying, designing, implementing, operating, and monitoring effective controls over the System to mitigate risks that threaten the achievement of the principal service commitments and system requirements ? Selecting the trust services categories and associated criteria that are the basis of our assertion

We confirm to the best of our knowledge and belief that the controls over the System were effective throughout the period October 1, 2022 to September 30, 2023, to provide reasonable assurance that the service commitments and system requirements were achieved based on the criteria relevant to security, availability, confidentiality, and privacy set forth in the AICPA's TSP section 100, 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy ( With Revised Points of Focus ? 2022). Very truly yours, Amazon Web Services Management

?2023 , Inc. or its affiliates 4

Attachment A ? Amazon Web Services System Overview

Since 2006, Amazon Web Services (AWS) has provided flexible, scalable and secure IT infrastructure to businesses of all sizes around the world. With AWS, customers can deploy solutions in a cloud computing environment that provides compute power, storage, and other application services over the Internet as their business needs demand. AWS affords businesses the flexibility to employ the operating systems, application programs, and databases of their choice.

The scope of this system description includes the following services:

? AWS Amplify ? Amazon API Gateway ? AWS AppFabric ? Amazon AppFlow ? AWS Application Migration Service ? AWS App Mesh ? AWS App Runner ? Amazon AppStream 2.0 ? AWS AppSync ? AWS Artifact ? Amazon Athena ? AWS Audit Manager ? Amazon Augmented AI [Excludes Public

Workforce and Vendor Workforce for all features] ? Amazon EC2 Auto Scaling ? AWS Backup ? AWS Batch ? Amazon Bedrock ? Amazon Braket ? AWS Certificate Manager (ACM) ? AWS Chatbot ? Amazon Chime ? Amazon Chime SDK ? AWS Clean Rooms ? AWS Cloud9 ? Amazon Cloud Directory ? AWS Cloud Map ? AWS CloudFormation ? Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of Presences] ? AWS CloudHSM ? AWS CloudShell ? AWS CloudTrail ? Amazon CloudWatch

? AWS loT Core ? AWS IoT Device Defender ? AWS IoT Device Management ? AWS IoT TwinMaker ? AWS IoT Events ? AWS IoT Greengrass ? AWS IoT SiteWise ? Amazon Kendra ? AWS Key Management Service (KMS) ? Amazon Keyspaces (for Apache

Cassandra) ? Amazon Managed Service for Apache

Flink ? Amazon Kinesis Data Firehose ? Amazon Kinesis Data Streams ? Amazon Kinesis Video Streams ? AWS Lake Formation ? AWS Lambda ? Amazon Lex ? AWS License Manager ? Amazon Location Service ? Amazon Macie ? Amazon Managed Grafana ? AWS Managed Services ? Amazon Managed Streaming for Apache

Kafka ? Amazon Managed Service for

Prometheus ? Amazon Managed Workflows for Apache

Airflow ? Amazon MemoryDB for Redis ? Amazon MQ ? Amazon Neptune ? AWS Network Firewall ? Amazon OpenSearch Service ? AWS OpsWorks Stacks

?2023 , Inc. or its affiliates 5

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download