Security, Compliance, and Governance for AI Solutions
Compliance and Shared Responsibility
AWS compliance programs provide assurance about AWS controls, but customers remain responsible for how they configure and use AI workloads. Governance includes inventories, tagging, approval workflows, policies, and retention.
Concepts
- AWS compliance programs include certifications and reports such as SOC and ISO, but customers must configure and operate workloads appropriately.
- The shared responsibility model means AWS secures the cloud while customers secure their data, identities, configurations, and application logic.
- Governance includes tagging, policy enforcement, approval workflows, model inventories, and retention rules.
Exam tips
- Shared responsibility means AWS secures the cloud while customers secure their data, identities, configurations, and application logic.
- SOC and ISO reports support vendor and compliance review but do not configure your workload.
- Model inventories and approval workflows help govern AI systems.