AWS User Guide to Financial Services Regulations and Guidelines

This document is an AWS User Guide that provides information to assist financial services institutions in Australia regulated by the Australian Prudential Regulation Authority (APRA) in their use of Amazon Web Services (AWS) Cloud services. It outlines the Prudential Standard CPS 230 Operational Risk Management, which aims to ensure that APRA regulated institutions effectively manage operational risks and maintain critical operations during disruptions. The guide discusses the shared responsibility model between AWS and its customers regarding operational resilience, emphasizing that while AWS ensures the availability of its services, customers must manage the resiliency of their applications. Additionally, the document details compliance programs, operational resilience considerations, and key aspects of related Prudential Standards and Practice Guides. It serves as a resource for ARIs to implement appropriate information security and risk management strategies when utilizing AWS services.