https://www.mytecharm.com.co/post/aws-soc-2-compliance-what-auditors-actually-look-for-1qndiz