January 13, 2026
It was an honor to provide OSCAL advising and implementation support for AWS as they became the first organization to publish a compliance report in OSCAL format. The AWS Fall Payment Card Industry (PCI) Data Security Standard (DSS) Attestation of Compliance (AOC) report is available to AWS customers via AWS Artifact.
The AWS compliance team’s laser-focus on adding value and reducing friction for their customers is admirable. Their initiative to lead with an open, machine-readable format for various reports is truly inspiring.
This effort serves as a proof-of-concept for AWS, and they are eager to receive feedback, particularly from the OSCAL and financial sector communities. We look forward to witnessing greater OSCAL adoption from AWS in 2026.
The original AWS Blog Post includes a link for acquiring the OSCAL content.