AWS Services in Scope by Compliance Program

We include generally available services in the scope of our compliance efforts based on the expected use case, feedback and demand. If a service is not currently listed as in scope of the most recent assessment, it does not mean that you cannot use the service. It is part of the shared responsibility for your organization to determine the nature of the data. Based on the nature of what you are building on AWS, you should determine if the service will process or store customer data and how it will or will not impact the compliance of your customer data environment.

We encourage you to discuss your workload objectives and goals with your AWS account team; they will be able to evaluate your proposed use case and architecture, and how our security and compliance processes overlay that architecture. Need to connect with an AWS business representative?

This webpage provides a list of AWS Services in Scope of AWS assurance programs. Unless specifically excluded, generally available features of each of the services are considered in scope of the assurance programs, and are reviewed and tested at the next opportunity for assessment. Refer to the AWS Documentation for the features of an AWS service.

✓ = This service is FedRAMP Certified and included in the current FedRAMP Certification boundary. For more specific details on status, please refer to each compliance program tab below.

 

Services going through FedRAMP assessment and certification will have the following status:

• Independent Assessment: This service is undergoing verification and validation by a FedRAMP Recognized Independent Assessment Service (formerly 3PAO).

For information on FedRAMP Certification updates including Significant Change Notifications, visit the FedRAMP Compliance FAQ. For DoD SRG services, see DoD CSP SRG Services in Scope.

 

FedRAMP
Last updated: September 18, 2026

SERVICES / PROGRAMS	SDKs	FedRAMP Class C (formerly Moderate baseline) (East/West)	FedRAMP Class D (formerly High baseline) (GovCloud)	FedRAMP Not Required*
Amazon API Gateway	apigateway	✓	✓
Amazon AppFlow	appflow	✓
Amazon Athena	athena	✓	✓
Amazon Aurora DSQL	dsql	✓
Amazon Aurora MySQL	rds	✓	✓
Amazon Aurora PostgreSQL	rds	✓	✓
Amazon Bedrock **	bedrock	✓	✓
Amazon Bedrock Agentcore	bedrock-agentcore	✓	✓
Amazon Chime SDK	chime-sdk-meetings	✓	✓
Amazon Cloud Directory	clouddirectory	✓	✓
Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of Presences]	cloudfront	✓
Amazon CloudWatch	cloudwatch	✓	✓
Amazon CloudWatch Logs	logs	✓	✓
Amazon Cognito	cognito-idp cognito-identity cognito-sync	✓	✓
Amazon Comprehend	comprehend	✓	✓
Amazon Comprehend Medical	comprehendmedical	✓	✓
Amazon Connect Customer	connect	✓	✓
Amazon Data Firehose	firehose	✓	✓
Amazon DataZone	datazone	✓
Amazon Detective	detective	✓	✓
Amazon DevOps Guru	devops-guru	✓
Amazon DocumentDB (with MongoDB compatibility)	docdb	✓	✓
Amazon DynamoDB	dynamodb	✓	✓
Amazon Elastic Block Store (EBS)	ebs	✓	✓
Amazon Elastic Compute Cloud (EC2)	ec2	✓	✓
Amazon EC2 Image Builder	imagebuilder	✓	✓
Amazon Elastic Container Registry (ECR)	ecr	✓	✓
Amazon Elastic Container Service (ECS)	ecs	✓	✓
Amazon Elastic File System (EFS)	efs	✓	✓
Amazon Elastic Kubernetes Service (EKS)	eks	✓	✓
Amazon ElastiCache	elasticache	✓	✓
Amazon Elastic MapReduce (EMR)	emr	✓	✓
Amazon Elastic VMware Service	evs	✓
Amazon EventBridge	events, pipes	✓	✓
Amazon FinSpace	finspace	✓
Amazon Forecast	forecast	✓
Amazon FSx	fsx	✓	✓
Amazon GuardDuty	guardduty	✓	✓
Amazon Inspector	inspector2	✓	✓
Amazon Inspector Classic	inspector	✓	✓
Amazon Kendra	kendra	✓	✓
Amazon Keyspaces (for Apache Cassandra)	keyspaces	✓	✓
Amazon Kinesis Data Streams	kinesis	✓	✓
Amazon Kinesis Video Streams	kinesisvideo		✓
Amazon Lex	lex-models, lex-runtime	✓	✓
Amazon Location Service	location		✓
Amazon Macie	macie2	✓
Amazon Managed Grafana	grafana		✓
Amazon Managed Service for Apache Flink	kinesisanalytics kinesisanalyticsv2	✓	✓
Amazon Managed Streaming for Apache Kafka (Amazon MSK)	kafka	✓	✓
Amazon Managed Service for Prometheus	amp	✓	✓
Amazon MemoryDB	memorydb	✓	✓
Amazon MQ	mq	✓	✓
Amazon Neptune	neptune	✓	✓
Amazon OpenSearch Service	opensearch	✓	✓
Amazon Pinpoint and End User Messaging	pinpoint pinpoint-email pinpoint-sms-voice pinpoint-sms-voice-v2 sms-voice sms-messaging	✓	✓
Amazon Polly	polly	✓	✓
Amazon Q Business	qbusiness	✓
Amazon Q Developer in chat applications [formerly AWS Chatbot]	chatbot	✓
Amazon Quick [formerly Amazon Quick Suite]	quicksight	✓	✓
Amazon RDS for Db2	rds	✓	✓
Amazon RDS for MariaDB	rds	✓	✓
Amazon RDS for MySQL	rds	✓	✓
Amazon RDS for Oracle	rds	✓	✓
Amazon RDS for Postgres	rds	✓	✓
Amazon RDS for SQL Server	rds	✓	✓
Amazon Redshift	redshift	✓	✓
Amazon Rekognition	rekognition	✓	✓
Amazon Route 53	route53	✓	✓
Amazon S3 Glacier	glacier	✓	✓
Amazon SageMaker AI	sagemaker	✓	✓
Amazon Security Lake	securitylake	✓	✓
Amazon Simple Email Service (SES)	ses	✓	✓
Amazon Simple Notification Service (SNS)	sns	✓	✓
Amazon Simple Queue Service (SQS)	sqs	✓	✓
Amazon Simple Storage Service (S3)	s3	✓	✓
Amazon Simple Workflow Service (SWF)	swf	✓	✓
Amazon Textract	textract	✓	✓
Amazon Timestream	timestream-query, timestream-write, timestreaminfluxdb	✓	✓
Amazon Transcribe	transcribe	✓	✓
Amazon Translate	translate	✓	✓
Amazon Verified Permissions	verifiedpermissions	✓	✓
Amazon Virtual Private Cloud (VPC)	ec2	✓	✓
Amazon WorkSpaces	workspaces	✓	✓
Amazon WorkSpaces Applications [formerly Amazon AppStream 2.0]	appstream	✓	✓
Amazon WorkSpaces Secure Browser	workspaces-web	✓
AWS Application Auto Scaling	application-autoscaling		✓
AWS Application Migration Service (MGN)	mgn	✓	✓
AWS App Mesh	appmesh	✓
AWS Artifact	artifact			✓
AWS Audit Manager	auditmanager	✓
AWS Backup	backup	✓	✓
AWS Batch	batch	✓	✓
AWS Billing Conductor	billingconductor			✓
AWS Budgets	budgets			✓
AWS Certificate Manager (ACM)	acm	✓	✓
AWS Clean Rooms	cleanrooms	✓
AWS Cloud9	cloud9	✓
AWS CloudFormation	cloudformation	✓	✓
AWS CloudHSM	cloudhsm	✓	✓
AWS Cloud Map	servicediscovery	✓	✓
AWS CloudShell		✓	✓
AWS CloudTrail	cloudtrail	✓	✓
AWS CodeBuild	codebuild	✓	✓
AWS CodeCommit	codecommit	✓	✓
AWS CodeDeploy	deploy	✓	✓
AWS CodePipeline	codepipeline	✓	✓
AWS Compute Optimizer	compute-optimizer		✓
AWS Config	configservice	✓	✓
AWS Control Tower	controltower	✓	✓
AWS Cost and Usage Reports				✓
AWS Cost Explorer	ce			✓
AWS Database Migration Service (DMS)	dms	✓	✓
AWS Data Exchange	dataexchange			✓
AWS DataSync	datasync	✓	✓
AWS Direct Connect***	directconnect	✓	✓
AWS Directory Service	ds	✓	✓
AWS Edge Hub				✓
AWS Elastic Beanstalk	elasticbeanstalk	✓	✓
AWS Elastic Disaster Recovery (AWS DRS)	drs	✓	✓
AWS Elemental MediaConvert	mediaconvert	✓	✓
AWS Entity Resolution	entityresolution	✓
AWS Fault Injection Service	fis	✓	✓
AWS Firewall Manager	fms	✓	✓
AWS Global Accelerator	globalaccelerator	✓
AWS Glue	glue	✓	✓
AWS Glue DataBrew	databrew	✓	✓
AWS Ground Station	groundstation	✓
AWS Health Dashboard	health	✓	✓
AWS HealthImaging	medical-imaging	✓
AWS HealthLake	healthlake	✓
AWS HealthOmics	omics	✓
AWS Identity and Access Management (IAM)	iam, sts, rolesanywhere	✓	✓
AWS IAM Identity Center	sso	✓	✓
AWS IoT Core	iot	✓	✓
AWS IoT Device Defender		✓	✓
AWS IoT Device Management	iot	✓	✓
AWS IoT Events	iotevents	✓	✓
AWS IoT Greengrass	greengrass	✓	✓
AWS IoT SiteWise	iotsitewise		✓
AWS IoT TwinMaker	iottwinmaker		✓
AWS Key Management Service (KMS)	kms	✓	✓
AWS Lambda	lambda	✓	✓
AWS License Manager	license-manager	✓	✓
AWS Mainframe Modernization	m2	✓
AWS Managed Services (AMS)		✓	✓
AWS Management Console				✓
AWS Marketplace				✓
AWS Network Firewall	network-firewall	✓	✓
AWS Network Manager	networkmanager	✓	✓
AWS Organizations	organizations	✓	✓
AWS Outposts (Software)	outposts	✓	✓
AWS Parallel Computing Service	pcs	✓	✓
AWS Private Certificate Authority	acm-pca	✓	✓
AWS Resilience Hub	resiliencehub		✓
AWS Resource Access Manager (AWS RAM)	ram	✓	✓
AWS Resource Explorer	resource-explorer-2	✓	✓
AWS Resource Groups	resource-groups	✓	✓
AWS Secrets Manager	secretsmanager	✓	✓
AWS Security Hub CSPM	securityhub	✓	✓
AWS Security Incident Response	security-ir	✓
AWS Serverless Application Repository	serverlessrepo	✓	✓
AWS Service Catalog	servicecatalog	✓	✓
AWS Service Quotas	service-quotas			✓
AWS Shield (Standard and Advanced)	shield	✓
AWS Signer	signer	✓	✓
AWS Snowball Edge	snowball	✓	✓
AWS Step Functions	stepfunctions	✓	✓
AWS Systems Manager	ssm	✓	✓
AWS Storage Gateway	storagegateway	✓	✓
AWS Transfer Family	transfer	✓	✓
AWS Transform	transform	✓
AWS Trusted Advisor	trustedadvisor	✓	✓
AWS Verified Access (AVA)		✓	✓
AWS Web Application Firewall (WAF)	wafv2	✓	✓
AWS Web Application Firewall Classic (WAF Classic)	waf-regional	✓	✓
AWS Well-Architected Tool	wellarchitected	✓	✓
AWS Wickr		✓	✓
AWS X-RAY	xray	✓	✓
Kiro			✓

_{* Services not within the scope of FedRAMP certification. These services are not included in the FedRAMP Certification boundary. Customers are able to leverage this service by working with their AWS account team directly to seek independent agency approval.
**  The FedRAMP certification for Amazon Bedrock serverless models includes secure transmission, execution environment, access controls, encryption, and monitoring capabilities.
*** AWS Direct Connect is FedRAMP Certified (Class C and Class D) at U.S.-soil locations.}