Security, including HIPAA and PCI DSS compliance, is a shared responsibility between AWS and you. For example, it is your responsibility to configure your AWS Managed Microsoft AD password policies to meet PCI DSS requirements when using AWS Managed Microsoft AD. To learn more about the actions you may need to take to meet HIPAA and PCI DSS compliance requirements, see the compliance documentation for AWS Managed Microsoft AD , read the Architecting for HIPAA Security and Compliance on Amazon Web Services whitepaper, and see the AWS Cloud Compliance , HIPAA Compliance , and PCI DSS Compliance.