Bottom line: AWS has achieved a Mature rating in all assessed areas, demonstrating its commitment to meeting heightened security expectations for cloud service providers.
What's happening: The CyberVadis assessment was completed by AWS, with a team led by AWS Security, in collaboration with various third-party security experts. This assessment was conducted for the 2026 report, which is now available for due diligence on third-party suppliers. The report provides an in-depth analysis of AWS's security posture and identifies areas for improvement.
What to do: Security leaders should review the 2026 CyberVadis report to assess AWS's security practices and consider due diligence on third-party suppliers to ensure the security and integrity of their own cloud infrastructure. Additionally, AWS customers can use the report to evaluate the security of their own cloud services and make informed decisions about their cloud providers.