Abstract

This document provides information about services and resources that Amazon Web Services (AWS) offers customers to help them align with the requirements of the General Data Protection Regulation (GDPR) that might apply to their data processing activities. These include adherence to data protection standards, the AWS Cloud Computing Compliance Criteria Catalog (C5) attestation, adherence to the Cloud Infrastructure Services Providers in Europe (CISPE) Code of Conduct, data access controls, monitoring and logging tools, encryption, and key management. Additionally, this paper provides a dedicated Annex, AWS Customer EU Data Transfer Assessment Guide, which outlines practical steps and supplementary measures that customers can follow to assess and secure international data transfers in line with recommendations from the European Data Protection Board (EDPB).