Public clouds offer some basic capabilities. The top cloud providers have many certifications that they meet global compliance requirements, such as ISO 27001, PCI DSS, HIPAA, FedRAMP, and more.
But cloud compliance is not simply the responsibility of cloud providers. Cloud providers such as Amazon Web Services (AWS) and Azure give organizations control of their security controls. Organizations have a “shared responsibility” to ensure compliance over their entire hybrid and multi-cloud network. Each vendor has details about the security services that they offer, as well as their compliance posture.