[Fasebook]

What's the point of auditing security in the Cloud? Is there any point at which you can know that your making any progress?

[mscarborough]

Just one example -- Amazon will sign a Business Associate's Agreement for HIPAA compliance. That doesn't absolve you of your application security responsibilities, but it does give you piece of mind on the PAAS EC2/S3 side of things.

[tel]

For further note though, they won't unless you buy dedicated instances. This also disables RDS.