Amazon Web Services (AWS) is pleased to announce that the Fall 2025 System and Organization Controls (SOC) 1, 2, and 3 reports are now available. The reports cover 185 services over the 12-month period from October 1, 2024–September 30, 2025, giving customers a full year of assurance. These reports demonstrate our continuous commitment to adhering to the heightened expectations of cloud service providers.
Customers can download the Fall 2025 SOC 1 and 2 reports through AWS Artifact, a self-service portal for on-demand access to AWS compliance reports. Sign in to AWS Artifact in the AWS Management Console, or learn more at Getting Started with AWS Artifact. The SOC 3 report can be found on the AWS SOC Compliance Page.
AWS strives to continuously bring services into the scope of its compliance programs to help customers meet their architectural and regulatory needs. You can view the current list of services in scope on our Services in Scope page. As an AWS customer, you can reach out to your AWS account team if you have any questions or feedback about SOC compliance.
To learn more about AWS compliance and security programs, see AWS Compliance Programs. As always, we value feedback and questions; reach out to the AWS Compliance team through the Contact Us page.
If you have feedback about this post, submit comments in the Comments section below.
re:Invent ‘24 was jam-packed with product releases (check out Wiz Defend!), new AWS integrations, a 90s-style video rental store coming back to life, speaking sessions,…
A few months ago, we announced Wiz Remediation and Response. Today, we are thrilled to extend enhanced remediation and response capability to support Azure and…
Welcome to Wizlympics, the first Cloud Security Olympic Games where cloud enthusiasts and security experts can showcase their skills by distinguishing between real and fake…
Re:Inforce ‘24 was jam packed with demos, Security Live! session, incredible magician, a speaking session, a rooftop party, and tons of swag! Our amazing Wizard…
Table of Contents Initial Access and Lateral Movement to the Cloud Wide-Scale Cloud Compromise Detection and Repeated Re-Entry Effective response to cloud and hybrid attacks…