AWS Directory Service | Compliance

Question 1

How does AWS Directory Service enable single sign-on (SSO) to the AWS Management Console?

Compliance

AWS Directory Service | Security, Identity & Compliance

Answer 1

AWS Directory Service allows you to assign IAM roles to AWS Microsoft AD or Simple AD users and groups in the AWS cloud, as well as an existing, on-premises Microsoft Active Directory users and groups using AD Connector. These roles will control users’ access to AWS services based on IAM policies assigned to the roles. AWS Directory Service will provide a customer-specific URL for the AWS Management Console which users can use to sign in with their existing corporate credentials. See our documentation for more information on this feature.

Question 2

Can I use AWS Microsoft AD for AWS Cloud workloads that are subject to compliance standards?

Compliance

AWS Directory Service | Security, Identity & Compliance

Answer 2

Yes. AWS Microsoft AD has implemented the controls necessary to enable you to meet the U.S. Health Insurance Portability and Accountability Act (HIPAA) requirements and is included as an in-scope service in the Payment Card Industry Data Security Standard (PCI DSS) Attestation of Compliance and Responsibility Summary.

Question 3

How can I access compliance and security reports?

Compliance

AWS Directory Service | Security, Identity & Compliance

Answer 3

To access a comprehensive list of documents relevant to compliance and security in the AWS Cloud, see AWS Artifact.