A Cloud-Native Approach to SOC 2, HIPAA, and GDPR Compliance Using AWS Microservices

Authors: Anusha Joodala

DOI: https://doi.org/10.37082/IJIRMPS.v13.i3.232605

Short DOI: https://doi.org/g9q35s

Country: USA

Full-text Research PDF File:   View   |   Download

Abstract: The growing movement towards cloud-based services, it is essential for companies to be compliant with strict regulatory standards like SOC 2, HIPAA, and GDPR to secure data, privacy, and trust. In this paper, we discuss a cloud-native approach that utilizes AWS microservices to help customers deal with the intricate compliance mandates of these regulations. The paper explores the prospect of adopting the use of microservices in the cloud as a means to achieve the development of a cloud-based system that is secure, scalable and auditable. In particular, the paper describes how AWS services including AWS Identity and Access Management (IAM), Amazon S3, AWS Lambda, and Amazon CloudWatch help customers meet the demands of SOC 2, HIPAA, and GDPR. We'll then walk through multiple architectural patterns and practices for how customers can automate their compliance processes, enforce security standards, and enable ongoing monitoring to ensure that their organization is in a state of compliance. The discoveries affirm the significance of a cloud-natively designed infrastructure in compliance, and allow establishments and firms to scale more efficiently with enhanced security.

Keywords:

Paper Id: 232605

Published On: 2025-06-23

Published In: Volume 13, Issue 3, May-June 2025

Share this