AWS Audit Manager

AWS SecurityFree tier available

Automated compliance-evidence collection — maps AWS resource state and CloudTrail activity to control frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, FedRAMP, custom) and produces assessment reports for auditors

FluffyStack tools

Add to Service Builder Add to Compare Compare with equivalents Explore AWS in Treemap Explore security in Honeycomb See AWS regions on the World Map See security as a network Score jurisdiction exposure

Documentation Pricing AWS website

Jurisdictional exposure

Provider HQ

USSeattle, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations

APACCNEEAEUUKUSOther40 regions across 7 jurisdictions

Sovereign option

Yes — 6 sovereign-flagged regions available

Full scorecard for this service →US lens detail →Sovereign cloud coverage map →

Sub-services (2)

Frameworks

Prebuilt SOC 2 / ISO / HIPAA / PCI / FedRAMP control mappings

Assessments

Continuous evidence gathering per control

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPR SOC 2 ISO 27001 HIPAA PCI DSS FedRAMP C5 TISAX IRAP ENS High CCCS Medium ISMAP MTCS L3 K-ISMS

Where this runs

40 regions

28 countries

6sovereign

Sovereign regions (6)

AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
China (Beijing) · BeijingAWS China (Sinnet)
China (Ningxia) · YinchuanAWS China (NWCD)

Commercial regions (34)

Europe (8)

Europe (Paris)
Europe (Frankfurt)
Europe (Ireland)
Europe (Milan)
Europe (Spain)
Europe (Stockholm)
Europe (Zurich)
Europe (London)

North America (7)

Canada West (Calgary)
Canada (Central)
Mexico (Central)
US East (N. Virginia)
US West (Oregon)
US East (Ohio)
US West (N. California)

South America (1)

South America (São Paulo)

Asia (11)

Asia Pacific (Hong Kong)
Asia Pacific (Hyderabad)
Asia Pacific (Mumbai)
Asia Pacific (Jakarta)
Asia Pacific (Osaka)
Asia Pacific (Tokyo)
Asia Pacific (Malaysia)
Asia Pacific (Singapore)
Asia Pacific (Seoul)
Asia Pacific (Taipei)
Asia Pacific (Thailand)

Oceania (3)

Asia Pacific (Melbourne)
Asia Pacific (Sydney)
Asia Pacific (New Zealand)

Middle East (3)

Middle East (Bahrain)
Israel (Tel Aviv)
Middle East (UAE)

Africa (1)

Africa (Cape Town)

Equivalent services on other platforms

Google Cloud Assured WorkloadsGCP

Compliance-overlay controls that lock down existing GCP projects to a regulatory boundary — FedRAMP High / Moderate / Low, DoD IL2 / IL4 / IL5, HIPAA, CJIS, ITAR — by restricting region set, personnel access, and encryption controls automatically

Pricing

Pricing model:per-resource-assessment