Amazon Web Services (AWS) is pleased to announce that the Fall 2025 System and Organization Controls (SOC) 1, 2, and 3 reports are now available. The reports cover 185 services over the 12-month period from October 1, 2024–September 30, 2025, giving customers a full year of assurance. These reports demonstrate our continuous commitment to adhering to the heightened expectations of cloud service providers.
Customers can download the Fall 2025 SOC 1 and 2 reports through AWS Artifact, a self-service portal for on-demand access to AWS compliance reports. Sign in to AWS Artifact in the AWS Management Console, or learn more at Getting Started with AWS Artifact. The SOC 3 report can be found on the AWS SOC Compliance Page.
AWS strives to continuously bring services into the scope of its compliance programs to help customers meet their architectural and regulatory needs. You can view the current list of services in scope on our Services in Scope page. As an AWS customer, you can reach out to your AWS account team if you have any questions or feedback about SOC compliance.
To learn more about AWS compliance and security programs, see AWS Compliance Programs. As always, we value feedback and questions; reach out to the AWS Compliance team through the Contact Us page.
If you have feedback about this post, submit comments in the Comments section below.
Table of Contents Determine when a key was last used About the tracking period Getting started API reference Use case 1: Cost optimization through unused…
On 1 June 2026, Wiz Research identified a supply chain compromise affecting multiple packages published under the @redhat-cloud-services npm namespace. Investigation revealed that at least…
Table of Contents Understanding the crypto mining challenge Identifying signs of crypto mining activity How GuardDuty detects crypto mining Building multilayered protection against crypto mining…
Artificial Intelligence has officially crossed the chasm from experimental pilot to foundational cloud infrastructure. In just a few years, AI systems have moved from limited…
Table of Contents What we believe Introducing AWS Continuum for code vulnerabilities How it works Trust is graduated Continuum capabilities Getting started Chet Kapoor What…
Table of Contents Using IAM to differentiate between human-driven and AI-driven actions Understanding the changes for public endpoint authorization Using IAM with MCP servers and…