- AWSβΊ
- Security, Identity, and ComplianceβΊ
- AWS Services in Scope by Compliance Program
AWS Services in Scope by Compliance Program
Multi-Tier Cloud Security (MTCS)
We include generally available services in the scope of our compliance efforts based on the expected use case, feedback and demand. If a service is not currently listed as in scope of the most recent assessment, it does not mean that you cannot use the service. It is part of the shared responsibility for your organization to determine the nature of the data. Based on the nature of what you are building on AWS, you should determine if the service will process or store customer data and how it will or will not impact the compliance of your customer data environment.
We encourage you to discuss your workload objectives and goals with your AWS account team; they will be able to evaluate your proposed use case and architecture, and how our security and compliance processes overlay that architecture. Need to connect with an AWS business representative?
This webpage provides a list of AWS Services in Scope of AWS assurance programs. Unless specifically excluded, generally available features of each of the services are considered in scope of the assurance programs, and are reviewed and tested at the next opportunity for assessment. Refer to the AWS Documentation for the features of an AWS service.
β = This service is currently in scope and is reflected in current reports. For more specific details on status, please refer to each compliance program tab below.
MTCS
Last updated: January 6, 2026
| SERVICES / PROGRAMS | US-East
(Ohio) |
US-East
(N.Virginia) |
US-West
(Oregon) |
US-West
(N.California) |
Singapore | Seoul |
|---|---|---|---|---|---|---|
| Amazon API Gateway | β | β | β | β | β | β |
| Amazon AppFlow | β | β | β | β | β | β |
| Amazon Application Recovery Controller | β | β | β | β | β | β |
| Amazon Athena | β | β | β | β | β | β |
| Amazon Augmented AI [excludes Public Workforce and Vendor Workforce for all features] | β | β | β | β | β | |
| Amazon Bedrock | β | β | β | |||
| Amazon Chime | β | β | β | β | β | β |
| Amazon Chime SDK | β | β | β | β | β | β |
| Amazon Cloud Directory | β | β | β | β | β | β |
| Amazon CloudFront [excludes content delivery through Amazon CloudFront Embedded Point of Presences] | β | β | β | β | β | β |
| Amazon CloudWatch | β | β | β | β | β | β |
| Amazon CloudWatch Logs | β | β | β | β | β | β |
| Amazon Cognito | β | β | β | β | β | β |
| Amazon Comprehend | β | β | β | β | β | |
| Amazon Comprehend Medical | β | β | β | |||
| Amazon Connect | β | β | β | β | ||
| Amazon Data Firehose | β | β | β | β | β | β |
| Amazon Datazone | β | β | β | β | β | |
| Amazon Detective | β | β | β | β | β | β |
| Amazon DevOps Guru | β | β | β | β | β | β |
| Amazon DocumentDB (with MongoDB compatibility) | β | β | β | β | β | |
| Amazon DynamoDB | β | β | β | β | β | β |
| Amazon EC2 Auto Scaling | β | β | β | β | β | β |
| Amazon Elastic Block Store (EBS) | β | β | β | β | β | β |
| Amazon Elastic Compute Cloud (EC2) | β | β | β | β | β | β |
| Amazon Elastic Container Registry (ECR)
|
β | β | β | β | β | β |
| Amazon Elastic Container Service (ECS) | β | β | β | β | β | β |
| Amazon Elastic File System (EFS) | β | β | β | β | β | β |
| Amazon Elastic Kubernetes Service (EKS) | β | β | β | β | β | β |
| Amazon Elastic MapReduce (EMR) | β | β | β | β | β | β |
| Amazon ElastiCache
|
β | β | β | β | β | β |
| Amazon EventBridge
|
β | β | β | β | β | β |
| Amazon Finspace | β | β | β | β | ||
| Amazon Forecast | β | β | β | β | β | |
| Amazon Fraud Detector | β | β | β | β | ||
| Amazon FSx | β | β | β | β | β | β |
| Amazon GuardDuty | β | β | β | β | β | β |
| Amazon Inspector | β | β | β | β | β | β |
| Amazon Inspector Classic | β | β | β | β | β | β |
| Amazon Kendra | β | β | β | β | ||
| Amazon Keyspaces (for Apache Cassandra) | β | β | β | β | β | β |
| Amazon Kinesis Data Streams | β | β | β | β | β | β |
| Amazon Kinesis Video Streams | β | β | β | β | β | |
| Amazon Lex | β | β | β | |||
| Amazon Location Service | β | β | β | β | ||
| Amazon Macie | β | β | β | β | β | β |
| Amazon Managed Grafana | β | β | β | β | β | |
| Amazon Managed Service for Apache Flink | β | β | β | β | β | β |
| Amazon Managed Service for Prometheus | β | β | β | β | β | β |
| Amazon Managed Streaming for Apache Kafka | β | β | β | β | β | β |
| Amazon Managed Workflows for Apache Airflow (Amazon MWAA) | β | β | β | β | β | β |
| Amazon MemoryDB | β | β | β | β | β | β |
| Amazon MQ | β | β | β | β | β | β |
| Amazon Neptune | β | β | β | β | β | β |
| Amazon OpenSearch Service | β | β | β | β | β | β |
| Amazon Personalize | β | β | β | β | β | |
| Amazon Pinpoint and End User Messaging | β | β | β | β | β | |
| Amazon Polly | β | β | β | β | β | β |
| Amazon Q Business | β | β | ||||
| Amazon Q Developer | β | β | β | β | β | β |
| Amazon Quantum Ledger Database (QLDB) | β | β | β | β | β | |
| Amazon Quick Suite [formerly Amazon QuickSight] | β | β | β | β | β | |
| Amazon Redshift | β | β | β | β | β | β |
| Amazon Rekognition | β | β | β | β | β | β |
| Amazon Relational Database Service (RDS) | β | β | β | β | β | β |
| Amazon Route 53 | β | β | β | β | β | β |
| Amazon S3 Glacier | β | β | β | β | β | β |
| Amazon SageMaker AI [excludes Studio Lab, Public Workforce and Vendor Workforce for all features] | β | β | β | β | β | β |
| Amazon Security Lake | β | β | β | β | β | β |
| Amazon Simple Email Service (SES) | β | β | β | β | β | β |
| Amazon Simple Notification Service (SNS) | β | β | β | β | β | β |
| Amazon Simple Queue Service (SQS) | β | β | β | β | β | β |
| Amazon Simple Storage Service (S3) | β | β | β | β | β | β |
| Amazon Simple Workflow Service (SWF) | β | β | β | β | β | β |
| Amazon SimpleDB | β | β | β | β | ||
| Amazon Textract | β | β | β | β | β | β |
| Amazon Timestream | β | β | β | |||
| Amazon Transcribe | β | β | β | β | β | β |
| Amazon Translate | β | β | β | β | β | β |
| Amazon Verified Permissions | β | β | β | β | β | β |
| Amazon Virtual Private Cloud (VPC) | β | β | β | β | β | β |
| Amazon WorkMail | β | β | ||||
| Amazon WorkSpaces | β | β | β | β | ||
| Amazon WorkSpaces Applications [formerly known as Amazon AppStream 2.0] | β | β | β | β | ||
| Amazon Workspaces Secure Browser | β | β | β | |||
| Amazon WorkSpaces Thin Client | β | β | ||||
| AWS Amplify
|
β | β | β | β | β | β |
| AWS App Mesh | β | β | β | β | β | β |
| AWS App Runner | β | β | β | β | ||
| AWS AppFabric | β | |||||
| AWS Application Migration Service | β | β | β | β | β | β |
| AWS AppSync | β | β | β | β | β | β |
| AWS Artifact | β | β | β | β | β | β |
| AWS Audit Manager | β | β | β | β | β | |
| AWS B2B Data Interchange | β | β | β | |||
| AWS Backup | β | β | β | β | β | β |
| AWS Batch | β | β | β | β | β | β |
| AWS Certificate Manager (ACM)
|
β | β | β | β | β | β |
| AWS Clean Rooms | β | β | β | β | β | |
| AWS Cloud Map | β | β | β | β | β | β |
| AWS Cloud9 | β | β | β | β | β | β |
| AWS CloudFormation | β | β | β | β | β | β |
| AWS CloudHSM | β | β | β | β | β | β |
| AWS CloudShell | β | β | β | β | β | β |
| AWS CloudTrail | β | β | β | β | β | β |
| AWS CodeBuild | β | β | β | β | β | β |
| AWS CodeCommit | β | β | β | β | β | β |
| AWS CodeDeploy | β | β | β | β | β | β |
| AWS CodePipeline | β | β | β | β | β | β |
| AWS Config | β | β | β | β | β | β |
| AWS Control Tower | β | β | β | β | β | β |
| AWS Data Exchange | β | β | β | β | β | β |
| AWS Database Migration Service (DMS) | β | β | β | β | β | β |
| AWS DataSync | β | β | β | β | β | β |
| AWS Deadline Cloud | β | β | β | β | β | |
| AWS Device Farm | β | β | β | β | β | β |
| AWS Direct Connect | β | β | β | β | β | β |
| AWS Directory Service [excludes Simple AD] | β | β | β | β | β | β |
| AWS Elastic Beanstalk | β | β | β | β | β | β |
| AWS Elastic Disaster Recovery | β | β | β | β | β | β |
| AWS Elemental MediaConnect | β | β | β | β | β | β |
| AWS Elemental MediaConvert | β | β | β | β | β | β |
| AWS Elemental MediaLive | β | β | β | β | β | |
| AWS Entity Resolution | β | β | β | β | β | |
| AWS Fault Injection Service | β | β | β | β | β | β |
| AWS Firewall Manager | β | β | β | β | β | β |
| AWS Global Accelerator | β | β | β | β | β | β |
| AWS Glue
|
β | β | β | β | β | β |
| AWS Glue DataBrew | β | β | β | β | β | β |
| AWS Ground Station | β | β | β | β | β | |
| AWS Health Dashboard | β | β | β | β | β | β |
| AWS HealthImaging | β | β | ||||
| AWS HealthLake | β | β | β | |||
| AWS HealthOmics | β | β | β | β | ||
| AWS IAM Identity Center | β | β | β | β | β | β |
| AWS Identity and Access Management (IAM) | β | β | β | β | β | β |
| AWS IoT Analytics | β | β | β | |||
| AWS IoT Core | β | β | β | β | β | β |
| AWS IoT Device Defender | β | β | β | β | β | β |
| AWS IoT Device Management | β | β | β | β | β | β |
| AWS IoT Events | β | β | β | β | β | |
| AWS IoT Greengrass | β | β | β | β | β | |
| AWS IoT SiteWise | β | β | β | β | β | |
| AWS IoT TwinMaker | β | β | β | β | ||
| AWS Key Management Service (KMS) | β | β | β | β | β | β |
| AWS Lake Formation | β | β | β | β | β | β |
| AWS Lambda | β | β | β | β | β | β |
| AWS License Manager | β | β | β | β | β | β |
| AWS Mainframe Modernization | β | β | β | β | β | β |
| AWS Managed Services | β | β | β | β | β | β |
| AWS Network Firewall | β | β | β | β | β | β |
| AWS Organizations | β | β | β | β | β | β |
| AWS Outposts | β | β | β | β | β | β |
| AWS Payment Cryptography | β | β | β | β | ||
| AWS Private Certificate Authority | β | β | β | β | β | β |
| AWS Resilience Hub | β | β | β | β | β | β |
| AWS Resource Access Manager (RAM) | β | β | β | β | β | β |
| AWS Resource Explorer | β | β | β | β | β | β |
| AWS Resource Groups | β | β | β | β | β | β |
| AWS Secrets Manager | β | β | β | β | β | β |
| AWS Security Hub CSPM (formerly AWS Security Hub) | β | β | β | β | β | β |
| AWS Security Incident Response | β | β | β | β | β | |
| AWS Serverless Application Repository | β | β | β | β | β | β |
| AWS Service Catalog | β | β | β | β | β | β |
| AWS Shield | β | β | β | β | β | β |
| AWS Signer | β | β | β | β | β | β |
| AWS Snowball | β | β | β | β | β | β |
| AWS Step Functions | β | β | β | β | β | β |
| AWS Storage Gateway | β | β | β | β | β | β |
| AWS Systems Manager | β | β | β | β | β | β |
| AWS Transfer Family | β | β | β | β | β | β |
| AWS Trusted Advisor | β | β | β | β | β | β |
| AWS User Notifications | β | β | β | β | β | β |
| AWS Verified Access | β | β | β | β | β | β |
| AWS WAF | β | β | β | β | β | β |
| AWS Wickr | β | β | ||||
| AWS X-Ray | β | β | β | β | β | β |
| EC2 Image Builder | β | β | β | β | β | β |
| Elastic Load Balancing (ELB) | β | β | β | β | β | β |
| FreeRTOS | β | β | β | β | β | β |
| VM Import/Export | β | β | β | β | β | β |
Need help?
For more information about Services in Scope?