This chapter covers cloud compliance at a high level. AZ-900 tests under 1.5.
Jump to a section
A simple way to picture Cloud Compliance Concepts
Banks follow strict regulations. Compliance in cloud refers to meeting regulatory requirements when using cloud services. It's the organization's responsibility despite using a cloud provider.
Cloud compliance means meeting regulatory requirements when using cloud services. Responsibilities are shared: provider secures infrastructure; customer configures appropriately. Some workloads have specific residency or processing requirements.
Identify regulatory requirements
Determine what regulations apply (GDPR, HIPAA, etc.)
Evaluate cloud compliance
Check if the cloud provider meets requirements.
Configure appropriately
Ensure resources are configured per requirements.
Healthcare data requires HIPAA compliance; confirm the cloud provider offers HIPAA-compliant services and configure accordingly.
Objective 1.5 expects awareness of compliance as a cloud consideration.
Organization retains compliance responsibility despite using cloud.
Provider and customer share responsibility.
Some workloads have specific requirements.
Organization remains responsible for compliance despite using cloud; provider secures infrastructure, customer configures appropriately per regulatory requirements.
You've just covered Cloud Compliance Concepts — now see how well it sticks with free AZ-900 practice questions. Full explanations included, no account needed.
Done with this chapter?