AWS has reached a new milestone in its commitment to operational excellence and security: the successful renewal of its ISO and CSA STAR certifications with no findings during the onboarding audit. This achievement, validated by EY Certify Point on May 31, 2026, includes expanding the scope to two additional services: AWS Skill Builder and Amazon Nova Act. The ISO standards cover critical areas such as quality management (9001:2015), information security (27001:2022), cloud security (27017:2015), privacy protection (27018:2019), personal data protection (27701:2019), IT service management (20000-1:2018), and business continuity (22301:2019), complemented by the CSA STAR CCM v4.0 standard. This certification demonstrates that AWS maintains robust controls to protect customer data, an essential requirement for any company trusting its cloud infrastructure.
The inclusion of AWS Skill Builder and Amazon Nova Act is not trivial. AWS Skill Builder is a training and certification platform that professionals use to learn cloud services, while Amazon Nova Act represents an advance in generative artificial intelligence, offering a state-of-the-art language model to automate complex tasks. Both services are now covered under the same compliance umbrella, allowing organizations to adopt them with the confidence that they meet the highest international standards. For companies developing custom software or integrating AI solutions, having a certified cloud provider reduces the burden of internal audits and accelerates compliance processes.
From a technical perspective, the ISO 27001:2022 certification incorporates updated controls against cybersecurity threats, such as incident management and ransomware protection, key aspects for any cloud service. The 27017:2015 standard adds specific guidelines for cloud computing, and 27018:2019 focuses on protecting personal data in cloud environments, essential in regions with strict regulations like GDPR in Europe. Business continuity (ISO 22301) ensures AWS can maintain operations even in disasters, a critical factor for enterprise applications requiring high availability. These frameworks are the foundation on which companies like Q2BSTUDIO build robust technological solutions, integrating AWS/Azure cloud into their digital transformation projects.
For IT managers and innovation directors, this news reinforces confidence in the AWS cloud as a platform for deploying custom applications. Custom software development on certified infrastructures ensures sensitive data is protected from the network layer to the application layer. Additionally, the inclusion of Amazon Nova Act opens the door to AI agents capable of natural language processing, analyzing large volumes of data, and automating workflows without compromising security. Q2BSTUDIO, as a technology partner, helps companies leverage these generative AI models within certified environments, combining artificial intelligence with advanced cybersecurity practices.
The value of ISO and CSA STAR certifications goes beyond compliance: they represent a competitive advantage. End customers increasingly demand transparency in how their data is managed. Having a cloud provider with these accreditations simplifies negotiations with regulated sectors such as finance, healthcare, or public administration. For example, a company wishing to implement a Business Intelligence solution with Power BI on data hosted in AWS can do so with the certainty that the underlying platform meets privacy and security requirements. Our cloud services on AWS and Azure are designed to integrate these certifications into each client’s architecture, maximizing efficiency and reducing risk.
The audit by EY Certify Point, with no findings, is an indicator of maturity in AWS’s internal processes. This not only affects the directly certified services but also the entire ecosystem of tools surrounding them: from identity management (IAM) to monitoring with CloudWatch. For Q2BSTUDIO, working with a cloud partner that has passed such demanding audits allows us to offer our clients cybersecurity solutions, such as pentesting and vulnerability analysis, on a solid foundation. Process automation, supported by AI agents like those enabled by Amazon Nova Act, benefits from an environment where integrity and confidentiality are guaranteed.
Another relevant aspect is the annual scope expansion. Since the previous certification on February 25, 2026, AWS has added these two new services, demonstrating constant evolution. For companies evaluating cloud migration or expanding their use of cloud services, this history of updated certifications is a decisive factor. The combination of quality (ISO 9001), security (27001), and continuity (22301) standards offers a comprehensive view of AWS’s operational maturity. At Q2BSTUDIO, we consider these certifications as a fundamental pillar when designing cloud architectures, as they allow us to assure our clients that their data is in the hands of a provider that continuously invests in regulatory compliance.
Finally, it is worth noting that customers can access the certificates through AWS Artifact in the management console. This transparency facilitates compliance management for internal teams. The inclusion of AWS Skill Builder and Amazon Nova Act in the scope of ISO and CSA STAR certifications is positive news for the entire technology ecosystem, especially for custom application developers, AI integrators, and cybersecurity consultants. At Q2BSTUDIO, we closely monitor these updates to advise our clients on how to best leverage AWS capabilities while staying aligned with the most demanding regulatory frameworks.
In conclusion, AWS reinforces its position as a leader in cloud computing by certifying two new services with no findings, raising the level of trust for companies seeking to innovate with AI, automation, and data analytics. Investment in compliance is not an expense but a business strategy that enables organizations of all sizes to accelerate their digital transformation with guarantees. If your company needs guidance on implementing AWS solutions aligned with these standards, Q2BSTUDIO offers specialized consulting in cloud, custom software development, cybersecurity, and Business Intelligence.
