https://www.thebloxstrap.com.co/post/aws-soc-2-compliance-what-auditors-actually-look-for-1qndiz