recognize that compliance requirements vary among aws services