certificate - open-media.introdus.dk · scope for certificate 2014-014 this scope (edition:...

© Copyrights with regard to this document reside with Ernst & Young Cert ifyPoint B.V., headquartered at Antonio Vivaldistraat 150,1083 HP Amsterdam, the Netherlands. All rights reserved.

of 4 Digital version

Cert if icat eCert if icat e number : 2014-014

Cert if ied by EY Cert ifyPoint since: November 4, 2014

Based on cert if icat ion examinat ion in conformity with defined requirements in ISO/ IEC17021-1:2015, the Quality Management System as defined and implemented by

Amazon Web Services, Inc.*

located in Seatt le, Washington, United States of America, is compliant with therequirements as stated in the standard:

ISO 9001:2015Issue date of cert if icate: November 4, 2014

Re-issue date of cert ificate: December 15, 2017Expirat ion date of cert if icate: November 7, 2019

EY Cert ifyPoint will, according to the cert ificat ion agreement dated November 9, 2016,perform surveillance audits and acknowledge the cert if icate unt il the expirat ion date

noted above.

*The certification is applicable for the assets, services and locations as described in the scoping section onthe back of this certificate.

Drs. J. Sehgal RE | Director, EY Cert ifyPoint

Amazon Web Services, Inc.Scope for cer t if icat e 2014-014

This scope (edit ion: December 15, 2017) is only valid in connection with cert if icate 2014-014.


The scope of this ISO 9001:2015 Cert if icat ion is bounded by specif ied services ofAmazon Web Services, Inc. and specified facilit ies. The QMS is centrally managed outAmazon Web Services, Inc. headquarters in Seatt le, Washington, United States ofAmerica.The in-scope applicat ions, systems, people, and processes are globally implemented andoperated by teams out of an explicit set of facilit ies that comprise Amazon Web Services,Inc. and are specifically defined in the scope and bounds.

The Amazon Web Services, Inc. QMS scope includes the following services:

• Amazon API Gateway• Amazon Aurora• Amazon Cloud Directory• Amazon CloudFront• Amazon CloudWatch Logs• Amazon Cognito• Amazon Connect• Amazon DynamoDB• Amazon Elast ic Block Store

(EBS)• Amazon Elast ic Compute

Cloud (EC2)• Amazon Elast ic Container

Registry• Amazon Elast ic Container

Service (ECS)• Amazon Elast ic File System

(EFS)• Amazon Elast ic MapReduce

(EMR)• Amazon ElastiCache• Amazon Glacier• Amazon Inspector• Amazon Kinesis Data

Streams• Amazon Macie• Amazon QuickSight• Amazon RDS for MariaDB,

MySQL, Oracle, Postgres,SQL Server

• Amazon Redshift• Amazon Route53• Amazon S3 Transfer

Accelerat ion• Amazon SageMaker• Amazon Simple Email Service

(SES)• Amazon Simple Notification

Services (SNS)• Amazon Simple Queue

Service (SQS)• Amazon Simple Storage

Service (S3)• Amazon Simple Workflow

Service (SWF)• Amazon SimpleDB• Amazon Virtual Private Cloud

(VPC)• Amazon WorkDocs• Amazon WorkMail• Amazon WorkSpaces• Auto Scaling• AWS Batch• AWS CloudFormat ion• AWS CloudHSM• AWS CloudTrail• AWS CodeBuild• AWS CodeCommit• AWS CodeDeploy




• AWS CodePipeline• AWS Config• AWS Database Migrat ion

Service (DMS)• AWS Direct Connect• AWS Directory Service for

Microsoft Active Directory• AWS Elast ic Beanstalk• AWS Ident ity and Access

Management (IAM)• AWS IoT Core• AWS Key Management

Service (KMS)• AWS Lambda• AWS Lambda@Edge

• AWS Managed Services• AWS OpsWorks Stacks• AWS Shield• AWS Snowball Edge• AWS Snowball• AWS Snowmobile• AWS Step Funct ions• AWS Storage Gateway• AWS Systems Manager

(Amazon EC2 SystemsManager)

• AWS Web Applicat ion Firewall(WAF)

• AWS X-Ray• Elast ic Load Balancing• VM Import/ Export




Locat ions in scope:AWS data centers, which house the hardware support ing the AWS Services listed above.AWS Data centers are located in US East (Northern Virginia), US East (Ohio), US West(Oregon), US West (Northern California), AWS GovCloud (US), Canada (Montréal), EU(London), EU (Ireland), EU (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Mumbai),Asia Pacific (Seoul), Asia Pacific (Sydney), Asia Pacific (Tokyo), and South America (SãoPaulo) Regions, as well as the following AWS Edge Locat ions in:

• Melbourne, Australia• Sydney, Australia• Vienna, Austria• Rio de Janeiro, Brazil• São Paulo, Brazil• Montréal, Canada• Toronto, Canada• Prague, Czech Republic• Hong Kong, China• London, England• Marseille, France• Paris, France• Berlin, Germany• Frankfurt , Germany• Munich, Germany• Chennai, India• Mumbai, India• New Delhi, India• Dublin, Ireland• Milan, Italy• Osaka, Japan• Tokyo, Japan• Seoul, Korea• Kuala Lumpur, Malaysia

• Amsterdam, Netherlands• Manila, Philippines• Warsaw, Poland• Singapore• Madrid, Spain• Stockholm, Sweden• Taipei, Taiwan• California, United States• Florida, United States• Georgia, United States• Illinois, United States• Indiana, United States• Minnesota, United States• Missouri, United States• Nevada, United States• New Jersey, United States• New York, United States• Ohio, United Sates• Oregon, United States• Pennsylvania, United States• Texas, United States• Virginia, United States• Washington, United States

The Quality Management System mentioned in the above scope is restricted as definedin the “ ISMS Manual” version 2017.2, signed on November 3, 2017 by the Vice

President of AWS Security.Quality, as stated by AWS, is defined as their product ’s and feature’s ability to sat isfy the

requirements of confident iality, availability, integrity, and security.


Page 1 of 4 Digital version

Cert if icat e

Cert if icat e number : 2013-009Cert if ied by EY Cert ifyPoint since: November 18, 2010

Based on cert if icat ion examinat ion in conformity with defined requirements in ISO/ IEC17021-1:2015 and ISO/ IEC 27006:2015, the Information Security Management System

as defined and implemented by



ISO/ IEC 27001:2013Issue date of cert if icate: December 11, 2011



noted above.

*The certification is applicable for the assets, services and locations as described in the scoping section onthe back of this certificate, with regard to the specific requirements for information security as stated in

the Statement of Applicability, version 2017.01, dated November 20, 2017.





The scope of this ISO 27001:2013 Cert if icat ion is bounded by specified services ofAmazon Web Services, Inc. and specified facilit ies. The ISMS is centrally managed outAmazon Web Services, Inc. headquarters in Seatt le, Washington, United States ofAmerica.The in-scope applicat ions, systems, people, and processes are globally implemented andoperated by teams out of an explicit set of facilit ies that comprise Amazon Web Services,Inc. and are specifically defined in the scope and bounds.

The Amazon Web Services, Inc. ISMS scope includes the following services:• Amazon API Gateway• Amazon Aurora• Amazon Cloud Directory• Amazon CloudFront• Amazon CloudWatch Logs• Amazon Cognito• Amazon Connect• Amazon DynamoDB• Amazon Elast ic Block Store

(EBS)• Amazon Elast ic Compute Cloud

(EC2)• Amazon Elast ic Container




(EMR)• Amazon ElastiCache• Amazon Glacier• Amazon Inspector• Amazon Kinesis Data Streams• Amazon Macie• Amazon QuickSight• Amazon RDS for MariaDB,

MySQL, Oracle, Postgres, SQLServer



(SES)• Amazon Simple Notif icat ion

Services (SNS)• Amazon Simple Queue Service

(SQS)• Amazon Simple Storage Service

(S3)• Amazon Simple Workflow








Microsoft Act ive Directory• AWS Elast ic Beanstalk• AWS Ident ity and Access

Management (IAM)• AWS IoT Core• AWS Key Management Service

(KMS)• AWS Lambda• AWS Lambda@Edge











The Information Security Management System mentioned in the above scope isrestricted as defined in the “ ISMS Manual” version 2017.2, signed on November 3,

2017 by the Vice President of AWS Security.



Cert if icat e

Cert if icat e number : 2013-009Cert if ied by EY Cert ifyPoint since: November 18, 2010





ISO/ IEC 27001:2013Issue date of cert if icate: December 11, 2011



noted above.






Cert if icat e

Cert if icat e number : 2015-015Cert if ied by EY Cert ifyPoint since: October 1, 2015





ISO/ IEC 27017:2015Issue date of cert if icate: October 1, 2015


EY Cert ifyPoint will, according to the cert ificat ion agreement dated November 9, 2016,perform surveillance audits and acknowledge the cert if icate unt il the expirat ion date of

this cert if icate or the expirat ion of the related ISMS cert ificate with number [2013-009].






Cert if icat e













certificate - open-media.introdus.dk · scope for certificate 2014-014 this scope (edition:...

Documents