# AWS SOC 2 and ISO 27001 compliance checks · Meiyam

> Check AWS accounts against SOC 2 and ISO 27001: 25 automated rules for encryption, public exposure, IAM and logging, through a read-only role.

Canonical: https://meiyam.com/integrations/amazon-web-services

Live Cloud infrastructure

## AWS compliance checks for SOC 2 and ISO 27001

Check your AWS accounts against SOC 2 and ISO 27001 controls: encryption, public exposure, identity hygiene and audit logging.

[Register interest](https://meiyam.com/register) [All integrations](https://meiyam.com/integrations) Free trial opens at launch

AWS access cannot change or delete anything, because every API outside the read allowlist is denied.

At a glance

**Access**

A cross-account IAM role with a least-privilege read allowlist and an explicit deny on every other API, assumed with an external ID unique to the connection. A CloudFormation template creates it, and you can read the template before you launch it. No access keys change hands.

**Rules**

25 automated rules

### What it collects

-   S3 buckets encryption, public-access blocks, versioning
-   IAM root MFA, password policy, user and role posture
-   EC2, EBS and VPC encryption and network exposure
-   RDS and KMS encryption at rest
-   CloudTrail and AWS Config audit-trail coverage
-   Lambda function configuration

25 automated rules check this evidence. Every finding shows the captured configuration of its resource and the full history of what happened to it.

### Controls it feeds

#### SOC 2 criteria

-   CC6.1
-   CC6.6
-   CC7.1
-   CC7.2

#### ISO 27001 Annex A controls

-   A.5.17
-   A.5.33
-   A.8.3
-   A.8.5
-   A.8.9
-   A.8.15
-   A.8.20
-   A.8.22
-   A.8.24

The [SOC 2 page](https://meiyam.com/frameworks/soc-2) and the [ISO 27001 page](https://meiyam.com/frameworks/iso-27001) show where they sit in each framework.

### How it connects

Meiyam assumes a cross-account IAM role in your AWS account, with an external ID unique to the connection. An AWS CloudFormation template creates it, and you can read the template before you launch it. Meiyam reads configuration from Amazon Simple Storage Service (Amazon S3), AWS Identity and Access Management (IAM), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Block Store (Amazon EBS), Amazon Virtual Private Cloud (Amazon VPC), Amazon Relational Database Service (Amazon RDS), AWS Key Management Service (AWS KMS), AWS CloudTrail, AWS Config and AWS Lambda. It cannot change or delete anything, because every API outside the read allowlist is denied.

### Connecting it

1.  Launch the CloudFormation template
    
2.  Confirm the role
    
3.  Choose your regions
    
4.  Run the first scan
    

AWS is a trademark of Amazon.com, Inc. or its affiliates. Meiyam integrates with AWS through its published APIs; Meiyam is not affiliated with, sponsored by or endorsed by Amazon.com, Inc. or its affiliates. [Trademark notices](https://meiyam.com/legal/trademarks)

### Meiyam integrates with AWS

Register interest and we will tell you when Meiyam opens.

[Register interest](https://meiyam.com/register) [All integrations](https://meiyam.com/integrations)