AWS Security Blog
Tag: European Union
Introducing new regional implementations of Landing Zone Accelerator on AWS to support digital sovereignty
Customers often tell me that they want a simpler path to meet the compliance and industry regulatory mandates they have in their geographic regions. In our deep engagements with partners and customers, we have learned that one of the greatest challenges for customers is the translation of security and compliance requirements into distinct technical controls. […]
Announcing initial services available in the AWS European Sovereign Cloud, backed by the full power of AWS
May 28, 2025: We updated this post to include AWS Artifact on the initial service list. August 8, 2024: We updated this post to include Amazon Neptune on the initial service list. July 16, 2024: We updated this post to include AWS Wickr on the initial service list. English | French | German | Italian […]
AWS plans to invest €7.8B into the AWS European Sovereign Cloud, set to launch by the end of 2025
The AWS European Sovereign Cloud, launching in 2025, is backed by a €7.8B investment in infrastructure, jobs creation, and skills development.
Customer checklist for eIDAS regulation now available
AWS is pleased to announce the publication of a checklist to help customers align with the requirements of the European Union’s electronic identification, authentication, and trust services (eIDAS) regulation regarding the use of electronic identities and trust services. The eIDAS regulation covers electronic identification and trust services for electronic transactions in the European single market. […]
Customer update: AWS and the EU-US Privacy Shield
Recently, the Court of Justice of the European Union (CJEU) issued a ruling regarding the EU-US Privacy Shield and Standard Contractual Clauses (SCCs), also known as model clauses. The CJEU ruled that the EU-US Privacy Shield is no longer valid for the transfer of personal data from the European Union (EU) to the United States […]
2019 C5 attestation is now available
September 9, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. AWS has completed its 2019 assessment against the Cloud Computing Compliance Controls Catalog (C5) information security and compliance program. Germany’s national cybersecurity authority—Bundesamt für Sicherheit in der Informationstechnik (BSI)—established C5 to define a reference standard for German cloud security requirements. […]
AWS and the European Banking Authority Guidelines on Outsourcing
Financial institutions across the globe use AWS to transform the way they do business. It’s exciting to watch our customers in the financial services industry innovate on AWS in unique ways, across all geos and use cases. Regulations continue to evolve in this space, and we’re working hard to help customers proactively respond to new […]
The AWS Shared Responsibility Model and GDPR
The EU’s General Data Protection Regulation (GDPR) describes data processor and data controller roles, and some customers and AWS Partner Network (APN) partners are asking how this affects the long-established AWS Shared Responsibility Model. I wanted to take some time to help folks understand shared responsibilities for us and for our customers in context of […]
EU Compliance Update: AWS’s 2017 C5 Assessment
May 22, 2019 update: We’ve removed a reference to the IT-Grundschutz Certification Workbook. AWS now recommends that customers refer to the Cloud Computing Compliance Controls Catalog (C5) instead. Learn more about C5 here: https://aws.amazon.com/compliance/bsi-c5/ AWS has completed its 2017 assessment against the Cloud Computing Compliance Controls Catalog (C5) information security and compliance program. Bundesamt für […]
AWS and the General Data Protection Regulation (GDPR)
Just over a year ago, the European Commission approved and adopted the new General Data Protection Regulation (GDPR). The GDPR is the biggest change in data protection laws in Europe since the 1995 introduction of the European Union (EU) Data Protection Directive, also known as Directive 95/46/EC. The GDPR aims to strengthen the security and […]