Skip to main content

AWS Cloud Security

AWS Services in Scope by Compliance Program

GNS National Restricted Certification

We include generally available services in the scope of our compliance efforts based on the expected use case, feedback and demand. If a service is not currently listed as in scope of the most recent assessment, it does not mean that you cannot use the service. It is part of the shared responsibility for your organization to determine the nature of the data. Based on the nature of what you are building on AWS, you should determine if the service will process or store customer data and how it will or will not impact the compliance of your customer data environment.

We encourage you to discuss your workload objectives and goals with your AWS account team; they will be able to evaluate your proposed use case and architecture, and how our security and compliance processes overlay that architecture. Need to connect with an AWS business representative?

This webpage provides a list of AWS Services in Scope of AWS assurance programs. Unless specifically excluded, generally available features of each of the services are considered in scope of the assurance programs, and are reviewed and tested at the next opportunity for assessment. Refer to the AWS Documentation for the features of an AWS service.

βœ“ = This service is currently in scope and is reflected in current reports. For more specific details on status, please refer to each compliance program tab below.

 

GNS National Restricted Certification
Last updated: June 17, 2025

SERVICES / PROGRAMS  GNS National Restricted Certification
Amazon API Gateway βœ“
Amazon Athena βœ“
Amazon CloudFront βœ“
Amazon CloudWatch βœ“
Amazon CloudWatch Logs βœ“
Amazon CodeBuild βœ“
Amazon CodeGuru βœ“
Amazon Cost Explorer βœ“
Amazon Detective βœ“
Amazon Dynamo DB βœ“
Amazon EC2 Auto Scaling βœ“
Amazon Elastic Block Store (EBS) βœ“
Amazon Elastic Compute Cloud (EC2) βœ“
Amazon Elastic Container Registry (ECR) βœ“
Amazon Elastic File System (EFS) βœ“
Amazon Eventbridge βœ“
Amazon FSx for Windows File Server βœ“
Amazon GuardDuty βœ“
Amazon Inspector βœ“
AWS Lambda βœ“
Amazon Macie βœ“
Amazon OpenSearch βœ“
Amazon Relational Database Service (RDS) βœ“
Amazon Route 53 βœ“
Amazon Security Lake βœ“
Amazon Simple Email Service (SES) βœ“
Amazon Simple Notification Service (SNS) βœ“
Amazon S3 βœ“
Amazon S3 Glacier βœ“
Amazon VPC βœ“
AWF Firewall Manager βœ“
AWS Application Migration Service βœ“
AWS Backup βœ“
AWS Certificate Manager βœ“
AWS Cloud Development Kit (CDK) βœ“
AWS Cloud Formation βœ“
AWS CloudHSM βœ“
AWS CloudTrail βœ“
AWS Config βœ“
AWS Database Migration Service βœ“
AWS DataSync βœ“
AWS Direct Connect βœ“
AWS Elastic Disaster Recovery (DRS) βœ“
AWS Gateway Load Balancer βœ“
AWS IAM Identity Center (successor to AWS Single Sign-On) βœ“
AWS Key Management Service (KMS) βœ“
AWS Network Firewall βœ“
AWS Organizations βœ“
AWS Outposts βœ“
AWS Private CA βœ“
AWS Secrets Manager βœ“
AWS Security Hub CSPM (formerly AWS Security Hub) βœ“
AWS Shield βœ“
AWS Shield Advanced βœ“
AWS Snowball βœ“
AWS Snowcone βœ“
AWS Step Functions βœ“
AWS Storage Gateway βœ“
AWS Systems Manager βœ“
AWS Transit Gateway βœ“
AWS Trusted Advisor βœ“
AWS Virtual Private Network (AWS VPN) βœ“
AWS Web Application Firewall βœ“
Elastic Load Balancing (ELB) βœ“

Need help?

For more information about Services in Scope?

Contact Us