AWS Fargate | Security and Compliance

Question 1

How should I choose when to use AWS Fargate?

Security and Compliance

AWS Fargate | Compute

Answer 1

Choose AWS Fargate to launch their containers without having to provision or manage EC2 instances. If you require greater control of your EC2 instances to support compliance and governance requirements or broader customization options, then use ECS without Fargate.

Question 2

With which compliance programs does AWS Fargate conform?

Security and Compliance

AWS Fargate | Compute

Answer 2

AWS Fargate meets the standards for PCI DSS Level 1, ISO 9001, ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and HIPAA eligibility.

For more information, visit our compliance pages.

Question 3

Can I use AWS Fargate for Protected Health Information (PHI) and other HIPAA regulated workloads?

Security and Compliance

AWS Fargate | Compute

Answer 3

Yes. AWS Fargate is HIPAA-eligible. If you have an executed Business Associate Addendum (BAA) with AWS, you can process encrypted Protected Health Information (PHI) using Docker containers deployed onto Fargate.

For more information, please visit our page on HIPAA compliance. If you plan to process, store, or transmit PHI and do not have an executed BAA from AWS, please contact us for more information.