AMAZON WEB SERVICES EMEA SARL, UK BRANCH

Amazon FSx Services

Amazon FSx services provide fully managed, high-performance file systems for enterprise workloads.

FSx for Lustre: High-performance system for ML,HPC, and video processing.

FSx for NetApp ONTAP: Enterprise storage with multi-protocol access.

FSx for OpenZFS: Managed storage for ZFS migration.

FSx for Windows File Server: Windows-native file servers with Active Directory.

Features

Automatic daily backups with incremental storage
Sub-millisecond latency performance for demanding workloads
Multi-AZ and Single-AZ deployment options for high availability
FSx for Lustre: Scales to terabytes throughput and millions IOPS
FSx for Lustre: Amazon S3 data repository integration
FSx for NetApp ONTAP: Multi-protocol access via NFS, SMB, iSCSI
FSx for NetApp ONTAP: Automatic data-tiering between SSD and capacity
FSx for OpenZFS: Data compression and deduplication for efficiency
FSx for OpenZFS: Point-in-time snapshots and instant data cloning
FSx for Windows File Server: Active Directory integration and ACLs

Benefits

Eliminate infrastructure management with fully managed service
Scale storage and throughput capacity without downtime
Ensure high availability with automated backups and replication
Process large datasets with sub-millisecond latency
Integrate seamlessly with S3 for data processing
Reduce costs with compression and tiering
Enable cross-region disaster recovery capabilities
Migrate from on-premises ZFS without code changes
Enable rapid recovery with instant snapshots
Support Windows workloads with SMB

Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at aws-ukps-frameworks@amazon.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

AMAZON WEB SERVICES EMEA SARL, UK BRANCH AWS UK G-Cloud Team
Telephone: 02036801685
Email: aws-ukps-frameworks@amazon.com

About your service

Service categories

IaaS

IaaS Storage

File

Service scope

Service constraints: FSx for Lustre
https://docs.aws.amazon.com/fsx/latest/LustreGuide/limits.html

FSx for NetApp ONTAP
https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/limits.html

FSx for OpenZFS
https://docs.aws.amazon.com/fsx/latest/OpenZFSGuide/limits.html

FSx for Windows File Server
https://docs.aws.amazon.com/fsx/latest/WindowsGuide/limits.html
System requirements: Lustre: Supported Linux operating system with Lustre client installed

Windows File Server: AD domain for authentication and access control
Cloud deployment model: Public cloud

User support

Email or online ticketing support: Yes
Support response times: Business Support+ response targets: General guidance <24h; system impaired <12h; production impaired <4h; production down <1h; business/mission-critical down <30m.
Enterprise Support: General guidance <24h; system impaired <12h; production impaired <4h; production down <1h; business/mission-critical down <15m.
Unified Operations aligns to Enterprise Support, but provides a five-minute response for business/mission-critical incidents (severity-5) raised via Incident Detection and Response. Resolution effectiveness depends on available context: onboarded, alarm-enabled workloads enable immediate access to detailed workload information, while non-onboarded workloads start with service health data plus customer-provided details.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.2 AA
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: Yes, at an extra cost
Web chat support availability: 24 hours, 7 days a week
Web chat support accessibility standard: WCAG 2.2 AA
Web chat accessibility testing: AWS conducts comprehensive accessibility testing through manual assistive technology testing, functional testing by people with disabilities, and automated evaluations. Accessibility specialists test the interface using screen readers (e.g., JAWS, NVDA, VoiceOver), keyboard-only navigation, and voice recognition to help make our cloud computing accessible to everyone.
Onsite support: Yes, at extra cost
Support levels: AWS Support offers three comprehensive plans designed to accelerate your cloud operations:

Business Support+, Enterprise Support, and Unified Operations.

Each tier builds upon the previous with enhanced features, faster response times, and deeper expertise to match your evolving requirements.

A comparison between the , Business Support+, Enterprise support plans is available on our Compare AWS Support Plans webpage (https://aws.amazon.com/premiumsupport/compare-plans/).

The table on that page compares the plans across many factors, including case severity/response times, access to architecture support, and account assistance.
Support available to third parties: Yes
AI chatbot: Yes

Onboarding and offboarding

Getting started: AWS provides a range of resources to help customers get started on our services. These include comprehensive documentation (in multiple formats), introductory videos, hands-on labs, online and in-person training, access to a large network of partners and support from the public sector account team.
Service documentation: Yes
Documentation formats: HTML

PDF

Other
Other documentation formats: Kindle
End-of-contract data extraction: Data may be copied out using AWS API tools to download data.
End-of-contract process: Buyer may terminate the relationship with Supplier for any reason by (i) providing Supplier with notice and (ii) closing Buyer's account for all services for which Supplier provides an account closing mechanism.

Buyers pay for the services they use to the point of account termination. Please see the AWS UK G-Cloud 15 Pricing Document affiliated with this service in the Digital Marketplace.

Customers retain control and ownership of their data. Supplier will not erase customer data for 30 days following an account termination. This allows customers to retrieve content from Supplier services so long as the customer has paid any charges for any post-termination use of the service offerings and all other amounts due.
Documentation accessibility standard: EN 301 549

Using the service

Web browser interface: Yes
Using the web interface: The AWS Management Console provides a simple web interface for Amazon Web Services. Users can log in with your AWS account name and password. If you’ve enabled AWS Multi-Factor Authentication, you will be prompted for your device’s authentication code. Almost all functionality for each of our services is exposed through the AWS Management Console. It facilitates management for all aspects of the AWS account in a consolidated view whilst providing access to all services and their respective functionalities.

In some cases, specific configuration parameters of a service are dedicated to, and only available from, the AWS Command Line Interface, AWS SDK, or the API.
Web interface accessibility standard: EN 301 549
Web interface accessibility testing: AWS tests AWS Management Console accessibility using a combination of manual evaluation, functional testing by people with disabilities, and automated scanning. Accessibility specialists assess the console with assistive technologies such as screen readers (e.g., JAWS, NVDA, VoiceOver), keyboard-only navigation, and other tools. AWS provides 250+ Accessibility Conformance Reports (ACRs) for AWS services, showing alignment to accessibility standards. Customers can download these reports on-demand via AWS Artifact for detailed service-specific information. Automated accessibility scanning complements human testing by identifying potential issues. This multi-layered approach is applied throughout the development lifecycle and informs the evidence captured in AWS Accessibility Conformance Reports.
API: Yes
What users can and can't do using the API: For the full list of API operations please see https://docs.aws.amazon.com/fsx/latest/APIReference/welcome.html
API automation tools: Ansible

Chef

SaltStack

Terraform

Puppet

Other
Other API automation tools: Wide range of third party services work with AWS APIs.

SDKs for Python, Ruby, PHP, JavaScript, Java, .NET, Node.js
API documentation: Yes
API documentation formats: HTML

PDF
Command line interface: Yes
Command line interface compatibility: Linux or Unix

Windows

MacOS
Using the command line interface: Amazon FSx for Lustre uses the following command line interfaces:
AWS Command Line Interface (AWS CLI) - A unified tool to manage your AWS services.

For full functionality please see:
https://docs.aws.amazon.com/cli/latest/reference/fsx

Scaling

Independence of resources: Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them.

Services which provide virtualized operational environments to customers (i.e. EC2) ensure that customers are segregated via security management processes/controls at the network and hypervisor level.

AWS continuously monitors service usage to protect infrastructure and support availability commitments/requirements. AWS maintains a capacity planning model to assess infrastructure usage and demands at least monthly, and usually more frequently. The AWS capacity planning model supports the planning of future demands to acquire and implement additional resources based on current resources and forecasted requirements.
Usage notifications: Yes
Usage reporting: API

Email

SMS

Other
Other usage reporting: AWS Service Quotas Automatic Quota Management:
AWS customers can receive notifications about quota usage through automatic quota management via the Service Quotas console or API.

For applicable services please see https://console.aws.amazon.com/servicequotas/home/amSettings

CloudWatch Service Limit and Quota Alarms:
You can use CloudWatch to configure alarms that alert you when usage approaches service limits and quotas.

For applicable services please see https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Quotas-Visualize-Alarms.html

AWS Trusted Advisor Service Limits Checks:
AWS Trusted Advisor can be used to set up notifications when service usage exceeds 80% of quota limits (requires Business or Enterprise Support plan).

For applicable services please see https://docs.aws.amazon.com/awssupport/latest/user/service-limits.html
Optimising consumption: Yes
Automatic scaling: Yes

Analytics

Infrastructure or application metrics: Yes
Metrics types: CPU

Disk

HTTP request and response status

Network

Number of active instances

Other
Other metrics: Storage capacity utilization and consumption metrics

File system throughput and IOPS performance metrics

Data read and write operation counts

Client connection counts and activity metrics

Metadata operation counts and latencies

Network throughput and data transfer metrics

API operation success rates and request counts

Storage efficiency and compression savings ratios

File server cache hit ratio metrics

Burst credits balance for throughput and IOPS
Reporting types: API access

Real-time dashboards

Regular reports
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Supplier-defined controls
Penetration testing frequency: At least every 6 months
Penetration testing approach: Another external penetration testing organisation
Protecting data at rest: Other
Other data at rest protection approach: AWS adheres to independently validated privacy, data protection, security protections and control processes. These are listed under “standards and certifications”.

AWS is responsible for the security of the cloud; customers are responsible for security in the cloud. AWS enables customers to control their content (where it will be stored, how it will be secured in transit/at rest, how access to their AWS environment will be managed).

Wherever appropriate, AWS offers customers options to add additional security layers to data at rest, via scalable and efficient encryption features. AWS offers flexible key management options and dedicated hardware-based cryptographic key storage.
Data sanitisation process: Yes
Equipment disposal approach: In-house destruction process
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Explicit overwriting of storage before reallocation / Secure Erase

Physical Destruction / Hardware containing data is completely destroyed

Backup and recovery

What’s backed up: Files (NetApp ONTAP, OpenZFS, Windows File Server)

Volumes (NetApp ONTAP, OpenZFS)

File systems (Lustre, OpenZFS, Windows File Server)

Volume snapshots (NetApp ONTAP)

Datasets (OpenZFS)

Folders (Windows File Server)
Backup controls: Central management: AWS Backup provides centralized configuration, scheduling, and monitoring

Cross-Region support: AWS Backup supports copying backups across Regions

Incremental backups: supports incremental backup capability

Restore testing: Supports restore testing

For more details, see https://docs.aws.amazon.com/whitepapers/latest/disaster-recovery-workloads-on-aws/disaster-recovery-options-in-the-cloud.html
Datacentre setup: Multiple datacentres with disaster recovery
Scheduling backups: Users schedule backups through a web interface
Backup recovery: Users can recover backups themselves, for example through a web interface
Backup and recovery: Yes
RPO/RTO: Yes

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Other
Other protection between networks: Bonded fibre optic connections
Data protection within supplier network: Other
Other protection within supplier network: Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them. AWS gives customers ownership and control over their content by design through simple, but powerful tools that allow customers to determine how their content will be secured in transit.

AWS enables customers to open a secure, encrypted channel to AWS services using TLS/SSL, and/or IPsec or TLS VPN (if applicable), or other means of protection the customers wish to use.
API calls can be encrypted with TLS/SSL to maintain confidentiality; the AWS Console connection is encrypted with TLS.

Availability and resilience

Guaranteed availability: AWS currently provides SLAs for several services. Due to the rapidly evolving nature of AWS’s product offerings, SLAs are best reviewed directly on our website via the link below: https://aws.amazon.com/legal/service-level-agreements/

Well-architected solutions on AWS that leverage AWS service SLAs and unique AWS capabilities such as multiple Availability Zones, can ease the burden of achieving specific SLA requirements. We encourage customers to visit our well architected documentation on our website, at https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/appendix-a-designed-for-availability-for-select-aws-services.html
Approach to resilience: The AWS Business Continuity plan details the process that AWS follows in the case of an outage, from detection to deactivation. AWS has developed a three-phased approach: Activation and Notification Phase, Recovery Phase, and Reconstitution Phase. This approach ensures that AWS performs system recovery and reconstitution efforts in a methodical sequence, maximizing the effectiveness of the recovery and reconstitution efforts and minimizing system outage time due to errors and omissions.

AWS maintains a ubiquitous security control environment across all regions. Each data centre is built to physical, environmental, and security standards in an active-active configuration, employing an n+1 redundancy model, ensuring system availability in the event of component failure. Components (N) have at least one independent backup component. All data centres are online and serving traffic. In case of failure, there is sufficient capacity to enable traffic to be load-balanced to the remaining sites.

Customers are responsible for implementing contingency planning, training and testing for their systems hosted on AWS. AWS provides customers with the capability to implement a robust continuity plan, including the frequent server instance back-ups, data redundancy replication, and the flexibility to place instances and store data within multiple geographic regions across multiple Availability Zones.
Outage reporting: Public dashboard; personalised dashboard with API and events; configurable alerting (email/SMS/messaging)

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)

Identity federation with existing provider (for example Google Apps)

Username or password

Other
Other user authentication: AWS’s Identity and Access Management (IAM) system allows you to control access to AWS services/resources. No actions are permissible without authentication. IAM facilitates the issuance of access permissions per user/group. MFA is available at no extra cost. AWS CloudTrail allows you to log, continuously monitor and retain events related to API calls across your AWS infrastructure.
Access restrictions in management interfaces and support channels: AWS IAM provides user access control to AWS services, APIs and specific resources. Other controls include time, originating IP address, SSL use, and whether users authenticated via Multi Factor Authentication devices. API calls to launch/terminate instances, change firewalls, and perform other functions are signed by customers’ Amazon Secret Access Key (either the root AWS Account’s Secret Access Key or the Secret Access key of a user created with IAM). API calls can be encrypted with TLS/SSL for confidentiality and customers can use TLS/SSL-protected API endpoints.
Access restriction testing frequency: At least every 6 months
Management access authentication: Multi-Factor Authentication (MFA)

Other
Description of management access authentication: AWS controls access to systems through authentication that requires a unique user ID and password. AWS systems don't allow actions to be performed without identification or authentication. Remote access requires multi-factor authentication. All remote administrative access attempts are logged and reviewed by the Security team for unauthorized attempts or suspicious activity. Incident response procedure is triggered in case of suspicious activity. AWS employs the concept of least privilege, allowing only the necessary access for users to accomplish their job. User access to AWS systems requires documented approval from authorized personnel.
Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: You control when users can access audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: CSA CSM version 4.0

ISO/IEC 27001

Other
Other security governance standards: ISO 27017, ISO27018, Cyber Essentials Plus, CSA CCM version 4.0, SOC1/2/3
Information security policies and processes: AWS implements formal, documented policies and procedures that provide guidance for operations and information security within the organisation. Policies address purpose, scope, roles, responsibilities and management commitment.

Employees maintain policies in a centralised and accessible location. AWS Security Assurance is responsible for familiarizing employees with the AWS security policies.

AWS has established information security functions that are aligned with defined structure, reporting lines, and responsibilities. Leadership involvement provides clear direction and visible support for security initiatives.

Policies are approved by AWS leadership at least annually or following a significant change to the AWS environment.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Changes to AWS services and features follow secure software development practices, including security risk reviews prior to launch. Developer access to production environments is via explicit access system requests, subject to owner review and authorisation.

Teams set bespoke change management standards per service, underpinned by standard AWS guidelines.

All production environment changes are reviewed, tested and approved. Stages include design, documentation, implementation (including rollback procedures), testing (non-production environment), peer to peer review (business impact/technical rigour/code), final approval by authorised party.

Emergency changes follow AWS incident response procedures. Exceptions to change management processes are documented and escalated to AWS management.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: AWS Security performs vulnerability scans on the host operating system, web applications, and databases in the AWS environment. Approved third party vendors conduct external assessments (minimum frequency: quarterly). Identified vulnerabilities are monitored and evaluated. Countermeasures are designed and implemented to neutralise known/newly identified vulnerabilities.

AWS Security monitors newsfeeds/vendor sites for patches and receives customer intelligence via http://aws.amazon.com/security/vulnerability-reporting/.

Security and Compliance is a shared responsibility between AWS and the customer, and the customer must perform some of the vulnerability management process. See https://aws.amazon.com/compliance/shared-responsibility-model/ for more details.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: AWS deploys (pan-environmental) monitoring devices to collect information on unauthorized intrusion attempts, usage abuse, and network/application bandwidth-usage. Devices monitor:

• Port scanning attacks
• Usage (CPU, processes, disk utilization, swap rates, software-error generated losses)
• Application metrics
• Unauthorized connection attempts

AWS security controls are reviewed by independent external auditors during audits for our SOC, PCI DSS and ISO 27001 compliance.

Security and Compliance is a shared responsibility between AWS and the customer. See https://aws.amazon.com/compliance/shared-responsibility-model/ for more details.
Incident management type: Supplier-defined controls
Incident management approach: AWS adopts a three-phased approach to manage incidents:

1. Activation and Notification Phase
2. Recovery Phase
3. Reconstitution Phase

To ensure the effectiveness of the AWS Incident Management plan, AWS conducts incident response testing, providing excellent coverage for the discovery of defects and failure modes as well as testing the systems for potential customer impact.

The Incident Response Test Plan is executed annually, in conjunction with the Incident Response plan. It includes multiple scenarios, potential vectors of attack, the inclusion of the systems integrator in reporting and coordination and varying reporting/detection avenues.
Post-quantum cryptography secure: Yes

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
Who implements virtualisation: Supplier
Virtualisation technologies used: Other
Other virtualisation technology used: AWS proprietary
How shared infrastructure is kept separate: Customer environments are logically segregated, preventing users and customers from accessing unassigned resources. Customers maintain full control over their data access. Services which provide virtualized operational environments to customers, ensure that customers are segregated and prevent cross-tenant privilege escalation and information disclosure via hypervisors and instance isolation.

Energy efficiency

Energy-efficient datacentres: Yes
Description of energy efficient datacentres: By the end of 2025, AWS will complete third-party conformity assessment on our owned and operated data centres in Ireland, France, Germany, Spain and Sweden. AWS owned data centres in the UK are designed and operated according to similar design standards used for in-scope data centres of the third-party assessment. As such, we believe AWS owned data centres in the UK align with the best practices of the EU Code of Conduct (EU CoC). New servers purchased for AWS data centers in the European Union meet EU 2019/424 ("Lot 9") energy efficiency requirements, and all data center servers and storage products comply with the EU Ecodesign Directive (2009/125/EC). AWS has conducted energy efficiency audits since 2015 and has implemented certified Energy Management Systems (EnMS) in accordance with ISO 50001 standards in Europe. AWS also maintains ISO 14001 certification for environmental management across European data center locations, demonstrating systematic environmental performance management aligned with ISO 14001:2015 standards. AWS achieved 100% renewable energy match for global operations in 2023, seven years ahead of the 2030 target, while Field Engineering teams continuously drive improvement projects to improve energy efficiency and optimize capacity.

Pricing

Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Start with up to $200 in Free Tier credits. Experiment with AWS services at no cost for up to 6 months. Access to 30+ always free service with specified monthly limits. When these limits are exceeded, credits are automatically applied to cover additional costs.
Link to free trial: https://aws.amazon.com/free/

Discount

Provide your minimum discount applicable to your baseline prices: 0%

Formula for calculating price of your services

Which of the core deployment models you intend to offer

Public Cloud

Public Cloud - Formula for calculating price of your services

Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
=
Baseline Pricing: Service-level pricing information is uploaded on the Digital Marketplace platform as part of the service listing requirements.

AWS service pricing is publicly accessible and transparently published on the AWS website. This comprehensive pricing portal provides detailed pricing information for all AWS services.

Prices listed on the Digital Marketplace align with AWS's public pricing structure, ensuring transparency and consistency across procurement channels.
Baseline Pricing - Web link: https://aws.amazon.com/pricing/
-
Minimum Discounting: 0%
+
Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
+
Additional sources of cost: Additional sources of cost are based on unique customer workload requirements and business objectives.

AWS offers a pay-as-you-go approach for the vast majority of cloud services. Customers pay only for the individual services they need, for as long as they use them, without requiring long-term contracts or complex licensing.

Customers control spending by controlling usage, with transparency into pricing dimensions and comprehensive tools to monitor and forecast.

Customers can use the AWS Pricing Calculator to estimate their monthly cloud infrastructure costs before deploying services, enabling informed budgeting and procurement decisions (https://calculator.aws/#/).
-
Additional sources of cost reduction: Additional sources of cost-reduction are based on unique customer workload requirements and business objectives. AWS offers a comprehensive selection of cost-reduction options:

Commitment-based pricing provides the most substantial savings. Savings Plans offer up to 72% discounts with flexible commitments, while Spot Instances deliver up to 90% discounts for fault-tolerant workloads.

Intelligent-optimization leverages AI-powered tools to eliminate waste. AWS Compute Optimizer recommends optimal instance configurations, typically reducing compute costs by 20-40%. Auto Scaling automatically adjusts capacity to match demand, eliminating over-provisioning. The newly announced Amazon Q Cost Optimization provides AI-driven recommendations across entire environments.

Storage-optimization reduces costs through S3 Intelligent-Tiering, which automatically moves data between access tiers, and lifecycle policies that archive or delete old data automatically.

Visibility-and-control tools enable proactive management. AWS Cost Explorer provides detailed spending-analysis, while AWS Budgets sets custom alerts. Cost Anomaly Detection uses machine-learning to identify unusual patterns.

Architectural-efficiency through serverless services like Lambda and Fargate ensures buyers pay only for actual compute time. AWS Managed Services reduce operational overhead by eliminating undifferentiated heavy lifting.

Expert guidance from AWS Account Managers and Solutions Architects provides proactive cost-reviews aligned with the AWS Well-Architected Framework Cost Optimization Pillar, with continuous price reductions passed through AWS's economies of scale.

Mandatory certifications

Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

Sole Control of the Infrastructure

ISO 9001 certification

Provided

ISO 14001 certification

Provided

ISO 27001 certification

Provided

ISO 20000-1 certification

Provided

ISO 27017 certification

Provided

Are you bidding to provide services under Lot 1b or both Lot 1a and Lot 1b?

Yes

ISO 27018 certification

Provided

Cyber Essentials

Do you have a Cyber Essentials Plus certificate?: Yes
Cyber Essentials Plus certificate Number: 0e793249-f3de-4efa-8f53-250eeae277ea

Non-mandatory Standards and certifications

ISO 28000:2022 certification: No
Quality management systems (QMS): Yes
CSA STAR certification: Yes
CSA STAR accreditation date: Friday 18 November 2022
CSA STAR certification level: Level 2: CSA STAR Attestation
What the CSA STAR doesn’t cover: The certification covers specific AWS services and regions that are listed in the scope documentation. Any AWS services or regions not included in the published scope are not covered by the certification.

For in scope regions, see: https://d1.awsstatic.com/onedam/marketing-channels/website/aws/en_US/certification/compliance/csa_star_certification.pdf

and

For in scope services by compliance program see: https://aws.amazon.com/compliance/services-in-scope/
PCI certification: Yes
Who accredited the PCI DSS certification: Coalfire Systems, Inc
PCI DSS accreditation date: Tuesday 17 June 2025
What the PCI DSS doesn’t cover: AWS holds PCI Service Provider Level 1 compliance for its infrastructure, but AWS does not directly store, transmit, or process customer cardholder data.
If customers create a cardholder data environment (CDE) using AWS services, they are responsible for ensuring their implementation meets PCI DSS requirements.

Services and Regions Outside Certification Scope:

AWS services listed in the PCI DSS compliance scope are covered. Any AWS services not included in the published scope are not covered by the certification

For in scope services by compliance program see: https://aws.amazon.com/compliance/services-in-scope/

Only specific AWS Regions that have been assessed are covered. Regions not listed in the certification scope are excluded

Customer Responsibilities (Not Covered by AWS Certification):

Customer data - Customer's own cardholder data and how they handle it

IAM (Identity & Access Management) - Customer's user access controls and permissions

Operating system patches - Maintaining and patching customer's OS

Firewall configuration - Customer's Security Groups and network ACL configurations

Customer environments not in-scope for PCI DSS - Customer's own applications and workloads that don't handle cardholder data
Other security certifications: Yes
Any other security certifications: ISO 42001:2023 - Artificial Intelligence Management System

ISO 22301:2019 - Business Continuity Management System

Full list: https://aws.amazon.com/compliance/programs

Section B - Commitment for Future: Delivery: Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified

Plans to engage the contract workforce in deciding the most important workplace issues to address

Ensuring new workers are informed of their right to join a trade union

Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce

Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing

Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment

Activities to cascade good practice on fair working conditions throughout the supply chain

Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave

Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Volunteering opportunities for staff

Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.

How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk

Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

Plans for positive actions with community groups.

Measures for making facilities used in the delivery of the contract available for community groups, education or training

Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered

Plans to respond flexibly and adapt approaches to community engagement and initiatives

Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors

Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition

Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

Understanding of the issues affecting the development of new skills by target cohort

Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

Other measures to offer development opportunities for the target cohort(s) in the contract workforce

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of issues relating to entering the contract workforce

Creation of outreach activities to create a pipeline of employees for the future contract delivery

Content of the outreach activity is designed to suit the target cohort

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format

Cookies on Digital Marketplace

Amazon FSx Services

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

About your service

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Backup and recovery

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Security governance

Operational security

Secure development

Separation between users

Energy efficiency

Pricing

Discount

Formula for calculating price of your services

Mandatory certifications

Cyber Essentials

Non-mandatory Standards and certifications

Social value

Service documents