AWS has different options for different companies/data. They even have options for US government data that are certified by DSS I believe, and they have options if you need PCI, HIPAA, and other types of compliance.

See: https://aws.amazon.com/compliance/hipaa-compliance/

https://aws.amazon.com/compliance/pci-dss-level-1-faqs/