Amazon Web Services Clears Canadian Cloud High Security Assessment
Amazon Web Services secured the Cloud High security assessment for 172 of its services and features on September 18, 2026, becoming the first cloud service provider in Canada to meet the strict security standard. The Canadian Centre for Cyber Security evaluated the platform, establishing a documented compliance baseline for federal and commercial workloads requiring enhanced protection. aws.amazon.com reported that the milestone gives public and commercial customers a verified path to deploy sensitive applications without additional justification or supplemental controls. cloudninjas.ca reported that practitioners can now attach the resulting assessment report directly to internal audit packages to satisfy federal requirements.
Regional Deployment and Service Scope Boundaries
The Cloud High assessment applies exclusively to services hosted within the Canada Central and Canada West regions. cloudninjas.ca reported that any cross-region replication or fail-over architecture connecting to facilities outside these two designated areas falls outside the certified boundary. Engineering teams must verify that every required tool appears in the 172-service list before committing to a system design. aws.amazon.com reported that the underlying framework relies on the ITSP.10.033 catalogue to establish baseline requirements for information processing up to the Protected B level.
Integration and Compliance Verification Workflows
Platform engineers and security teams access the summary assessment documentation directly through AWS Artifact. cloudninjas.ca reported that organizations should store the latest version of the compliance report in a controlled repository accessible to internal auditors and risk assessment personnel. The Cloud High profile builds directly upon the existing Cloud Medium baseline by layering additional controls to address higher integrity and availability demands. aws.amazon.com reported that regular monitoring of the compliance portal ensures engineering groups stay synchronized with any future additions to the certified service roster.
Frequently Asked Questions
What specific security profile does this assessment evaluate?
The assessment evaluates the Cloud High security profile, designated as PBHH, which enhances the integrity and availability requirements for sensitive organizational workloads. It builds directly upon the Cloud Medium profile by introducing stricter controls sourced from the ITSP.10.033 catalogue.
Which organization conducted the security assessment?
The Canadian Centre for Cyber Security conducted the assessment of the AWS infrastructure. The evaluation concluded on September 18, 2026, covering 172 distinct services and features.
How can compliance and security teams access the official assessment report?
Teams can download the summary assessment documentation directly through the AWS Artifact portal. Organizations use this report as formal evidence during compliance audits and risk reviews for federal workloads.
Keep reading