Executive summary
Amazon Web Services says an external onboarding audit by EY Certify Point completed with no findings and led to reissued certificates dated May 31, 2026, extending ISO 9001:2015, 27001:2022, 27017:2015, 27018:2019, 27701:2019, 20000-1:2018, 22301:2019 and CSA STAR CCM v4.0 scope to AWS Skill Builder and Amazon Nova Act after the prior certification dated February 25, 2026. AWS also states that customers can consult its certified-services page and access certificates through AWS Artifact.
Enterprise decision question
The useful governance question is not simply whether a provider holds a certificate. It is whether the specific service, control expectation and review purpose align with the certified scope. A certificate can support due diligence, but it should be mapped to the service actually consumed and to the internal requirement it is meant to satisfy.
For procurement, risk and security assurance teams, the decision principle is scope-first validation: confirm that the service under review appears in the provider’s official certification materials before relying on the evidence in a supplier assessment, control attestation file or customer audit response.
How to use the update responsibly
The RSS facts support a narrow conclusion: AWS has expanded certification coverage for named services under specified schemes. They do not establish that any customer workload is compliant, that all configurations are covered, or that local regulatory obligations are satisfied.
A practical review criterion is to separate provider-level assurance from customer-side responsibility. The certification record may help document vendor posture, while the enterprise still needs its own evaluation of architecture, data handling, access control, resilience expectations and contractual commitments.
Technical glossary
- Certification scope
- A documented assurance boundary showing which services, processes or controls are included in a certification.
- CSA STAR
- A Cloud Security Alliance assurance program using a cloud control framework referenced in the source facts.
- AWS Artifact
- An AWS console service through which customers can access compliance documents, according to the supplied source facts.
ملخص للعميل السعودي
Saudi-specific relevance is not established by the supplied source
No Saudi-specific conclusion is being asserted from the supplied metadata.
Transparency
Attribution and source method
Source facts referenced from Amazon Web Services: https://aws.amazon.com/blogs/security/2026-iso-and-csa-star-certificates-are-now-available-with-two-additional-services. This article is an original Kenzie synthesis and does not reproduce the source article.
Verified source facts used: the publisher is Amazon Web Services; the RSS title concerns availability of 2026 ISO and CSA STAR certificates with two additional services; the summary states an EY Certify Point onboarding audit completed with no findings, certificates were reissued, specified ISO and CSA STAR schemes were in scope, AWS Skill Builder and Amazon Nova Act were added, and customers can use the AWS certified-services page or AWS Artifact to access evidence. Evidence limits: only the supplied title and RSS summary were treated as verified; the full article, certificate documents, service pages, control mappings and customer environments were not independently reviewed here. Claims deliberately not made: no assertion is made about customer workload compliance, legal sufficiency, regional regulatory impact, security effectiveness beyond the stated audit outcome, vulnerability status, control implementation details or Saudi/GCC/MENA relevance. Independent decision reasoning added: the brief frames the update as a scope-validation and assurance-use question for enterprise governance, procurement and risk review, without attributing that reasoning to the source. Automated copyright score: 99. Source-overlap ratio: 0.0195. Longest source match: 14 words. Rights basis: trusted syndicated RSS metadata used only for factual, attributed synthesis.
Amazon Web Services
2026 ISO and CSA STAR certificates are now available with two additional services
Share enterprise knowledge
Share this article with your team
Help colleagues and clients discover this governed enterprise resource.