AWS Renews Portuguese GNS Certification for Classified Information, Expands to 66 Services

Amazon Web Services (AWS) has successfully renewed its certification with the Portuguese Gabinete Nacional de Segurança (GNS), affirming the compliance of its cloud infrastructure and security measures in the AWS Regions and edge locations within the European Union. This certification allows AWS to continue handling classified information up to the National Reservado level, which is equivalent to NATO's Restricted classification.

This renewed GNS certification, aligned with NIST SP800-53 Rev. 5 and CSA CCM v4 frameworks, underscores AWS's commitment to security, particularly for customers in the public sector and defense industries. The certification ensures that AWS meets the strict security and operational requirements set forth by the Portuguese government for processing sensitive data.

An independent audit by Adyta Lda, authorized by the GNS, validated AWS's security protocols. The GNS certification allows AWS clients, including public sector organizations and defense contractors in Portugal, to securely use AWS’s broad array of cloud services to process and store restricted information. This enables organizations to benefit from the scalability, reliability, and cost-efficiency of AWS cloud solutions, while maintaining compliance with national security standards.

With this renewal, AWS has expanded the scope of its GNS certification to include an additional 40 services, bringing the total to 66 certified services. Customers can now access these expanded services to manage sensitive data with confidence.

For a comprehensive list of AWS services covered under this certification, refer to the AWS Services in Scope by Compliance Program – GNS National Restricted Certification page. The Certificate of Compliance, demonstrating AWS's compliance with GNS standards, is available on the GNS Certifications page and through AWS Artifact.

For more details on AWS compliance with GNS standards, visit the AWS Compliance page.