# Cloud Compliance Concepts

> Chapter 55 of the Courseiva AZ-900 curriculum — https://courseiva.com/learn/az-900/compliance-cloud-overview

**Official objective:** 1.5 — Cloud Concepts

## Introduction

This chapter covers cloud compliance at a high level. AZ-900 tests under 1.5.

## Regulatory Requirements

Banks follow strict regulations. Compliance in cloud refers to meeting regulatory requirements when using cloud services. It's the organization's responsibility despite using a cloud provider.

## Core explanation

Cloud compliance means meeting regulatory requirements when using cloud services. Responsibilities are shared: provider secures infrastructure; customer configures appropriately. Some workloads have specific residency or processing requirements.

## Real-world context

Healthcare data requires HIPAA compliance; confirm the cloud provider offers HIPAA-compliant services and configure accordingly.

## Exam focus

Objective 1.5 expects awareness of compliance as a cloud consideration.

## Step by step

1. **Identify regulatory requirements** — Determine what regulations apply (GDPR, HIPAA, etc.)
2. **Evaluate cloud compliance** — Check if the cloud provider meets requirements.
3. **Configure appropriately** — Ensure resources are configured per requirements.

## Key takeaways

- Organization retains compliance responsibility despite using cloud.
- Provider and customer share responsibility.
- Some workloads have specific requirements.

## FAQ

**How does compliance work in the cloud?**

Organization remains responsible for compliance despite using cloud; provider secures infrastructure, customer configures appropriately per regulatory requirements.

---

Interactive version with quiz and diagrams: https://courseiva.com/learn/az-900/compliance-cloud-overview