Amazon Web Services for NIST SP 800-171 Revision 3
What Amazon Web Services’s data evidences toward NIST SP 800-171 Revision 3 today, and how to connect it.
What Amazon Web Services evidences here
- Cloud configuration checks feeds System and Communications Protection
This is where Amazon Web Services’s data is documented as relevant on our NIST SP 800-171 Revision 3 page — not a pre-built, automatic control mapping. You configure which controls it maps to inside CMDash.
How you connect Amazon Web Services
Reads your AWS configuration directly — root MFA, root access keys, password policy, S3 Block Public Access, CloudTrail, KMS key rotation and EBS encryption. Needs a read-only IAM credential and nothing else; no Security Hub subscription required.
About NIST SP 800-171 Revision 3
All 97 Revision 3 requirements for protecting CUI in nonfederal systems, in NIST's own 03.xx.xx numbering with the verbatim requirement text and the SP 800-171A evidence lists.
Revision 3 numbering, not the CMMC practice IDs: CMMC Level 2 is still defined by the Revision 2 requirements. The 33 requirements Revision 3 withdrew are not listed.