Questions in AWS Compliance

Hello, I am working on hardening the security groups for our Amazon EKS clusters to meet strict internal security policies. Our security team flagged the "All traffic, All ports, Self" (self=true / -...

We’re operating in a regulated environment where we’re only allowed to run workloads in a specific region. We’ve discovered a few situations where resources were accidentally created in other regions,...

Hi all, I want to do an ISO27001 (Annex A) assessment of the aws services running within an account to check their compliance against this standard. I guess enabling aws config and aws security hub w...

We are running a multi-region architecture where our application in the US East (N. Virginia) Region processes data stored in an S3 bucket located in the EU (Frankfurt) Region. This has resulted in si...

Amazon S3 itself is HIPAA eligible but wondering if anyone knows if S3 Tables is HIPAA eligible or need to expand the HIPAA eligibility similar to S3 Transfer Acceleration/Glacier.

Hi all, I have a requirement to generate alerts whenever a change is made in our AWS environment. For example, starting small, we would like to know when anyone makes a change to EC2 resources (a new ...

Folks, It's been long time since Amazon Q Business Pro service not available in au southeast 2 region and request your thought on any approximate timeline for it's availability. The requirement here ...

Hello. I'm trying to figure out what the FIPS compliant endpoint for the Domain Endpoint is. This is the Domain Endpoint, not the AWS API Endpoint. [The documentation](https://docs.aws.amazon.com/gene...

Hi everyone, I'm currently working on the PCI DSS certification and I'm facing a challenge. While I've found the PCI DSS v3.2.1 standard in Security Hub, my auditors are requiring compliance with the...

I’m seeking clarification on AWS’s policies regarding the use of Amazon IVS (Interactive Video Service) for live streaming adult content. I’ve reviewed the Service Terms, Acceptable Use Policy, and co...

Hello, I recently discovered that the eks-cluster-logging-enabled managed config rule is not available in us-gov-east-1. The documentation notes that it's supported in all regions though. [https://doc...

Hi AWS, we have a list of security controls as mentioned below. We are preferring the use of AWS Trusted Advisor and the Remediator to remediate them, but I am not sure if the Trusted Advisor will rem...