

# AWS Overview


 AWS offers a broad set of global, cloud-based services, including compute, storage, networking, Internet of Things (IoT), and many others. These services help organizations move faster, lower IT costs, and support scalability. AWS is trusted by the largest enterprises and popular start-ups to power a wide variety of workloads, such as web and mobile applications, game development, data processing and warehousing, storage, and archiving.

## AWS Services


 AWS provides over 200 cloud services that you can use in combinations tailored to your business or organizational needs. For information about all AWS services, see the [Amazon Web Services Cloud Platform](https://docs.aws.amazon.com/aws-technical-content/latest/aws-overview/amazon-web-services-cloud-platform.html#services) documentation.

This section introduces the AWS services that are most relevant for the deployment and operation of SAP solutions. The following list provides a high-level description of each service and its use for SAP systems. To view features, pricing, and documentation for an individual service, follow the *details*link after the description.

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/sap/latest/general/overview-aws.html)

## AWS Global Infrastructure


The AWS Cloud infrastructure is built around Regions and Availability Zones. An AWS Region is a physical location that provides multiple, physically separated and isolated Availability Zones. Each Availability Zone consists of one or more data centers that are connected with low-latency, high-throughput, and highly redundant networking. These Availability Zones offer an easier and more effective way to design and operate your applications and databases, making them more highly available, fault tolerant, and scalable than traditional single or multiple data center infrastructures.

For a list of the available AWS Regions and to learn more about the AWS global infrastructure, see [Global Infrastructure](https://aws.amazon.com/about-aws/globalinfrastructure) on the AWS website.

## AWS Security and Compliance


### Security


At AWS, security is our top priority. As an AWS customer, you will benefit from a data center and network architecture built to meet the requirements of the most security-sensitive organizations. Security in the cloud is much like security in your on-premises data centers—​only without the costs of maintaining facilities and hardware. In the cloud, you don’t have to manage physical servers or storage devices. Instead, you use software-based security tools to monitor and protect the flow of information into and out of your cloud resources.

As an AWS customer you inherit all the best practices of AWS policies, architecture, and operational processes built to satisfy the requirements of our most security-sensitive customers, and get the flexibility and agility you need in security controls.

The AWS Cloud enables a shared responsibility model. While AWS manages security **of** the cloud, you are responsible for security **in** the cloud. This means that you retain control of the security you choose to implement to protect your own data, platform, applications, systems, and networks no differently than you would in an on-site data center.

To learn more about AWS security, see [AWS Cloud Security](https://aws.amazon.com/security) on the AWS website.

### Compliance


 AWS provides robust controls to help maintain security and data protection in the cloud. As systems are built on top of AWS Cloud infrastructure, compliance responsibilities will be shared. By tying together governance-focused, audit-friendly service features with applicable compliance or audit standards, AWS compliance enablers build on traditional programs and help you operate in an AWS security control environment.

The IT infrastructure that AWS provides to its customers is designed and managed in alignment with best security practices and a variety of IT security standards. The following is a partial list of assurance programs with which AWS complies:
+ SOC 1/ISAE 3402, SOC 2, SOC 3
+ FISMA, FIPS, DIACAP, and FedRAMP
+ PCI DSS Level 1
+ ISO 9001, ISO 27001, ISO 27017, ISO 27701, ISO 27018

For more information, see [AWS Compliance Programs](https://aws.amazon.com/compliance/programs/).

## AWS Provisioning and Management


The provisioning and management of AWS services and resources use a self-service model managed by the customer or a partner. For an overview of the tools available for provisioning and management, see the management tools in the [AWS Services](#overview-aws-services) section.

Figure 1 shows the services managed by AWS and the services managed by the customer or partner for SAP.

 **Figure 1: Managed services for SAP on AWS ** 

![\[Managed services for SAP\]](http://docs.aws.amazon.com/sap/latest/general/images/sap-overview-managed-services.png)
