https://www.dailydishnews.org.uk/post/aws-soc-2-compliance-what-auditors-actually-look-for-dkjmg3