AWS Releases Independent Assessment Report for Landing Zone Accelerator's C5:2020 Compliance

New Compliance Report for Landing Zone Accelerator

AWS has released an independent assessment report on AWS Artifact for its Landing Zone Accelerator (LZA) solution. This report evaluates how LZA provides coverage for the Cloud Computing Compliance Criteria Catalogue (C5:2020) requirements, a standard published by Germany’s Federal Office for Information Security (BSI).

Addressing C5:2020 Compliance

Organizations operating in Germany and across Europe increasingly need to demonstrate cloud security compliance under C5:2020. The LZA assessment report offers an independent opinion on how the security baseline provisioned by LZA aligns with C5:2020 criteria for "security in the cloud." This complements AWS's existing C5 Type 2 attestation reports for "security of the cloud."

The report indicates that LZA can help implement 325 security controls in aggregate, with nearly 200 native security controls providing enhanced coverage for C5:2020 requirements. LZA is available in a standard multi-account configuration or as a container-based deployment option in the AWS European Sovereign Cloud for customers with data residency requirements.

Accelerating Compliance Journeys

LZA defines a security architecture baseline and automatically provisions AWS environments, taking on part of the shared security responsibility. The new report, along with the LZA Compliance Workbook, can help organizations reduce time spent on architecture design, evidence collection, and preparation for C5:2020 assessments. The LZA Compliance Workbook is also available on AWS Artifact, and the open-source Universal Configuration GitHub repository provides additional resources.