Principle 8: Supply chain security
The service provider should ensure that its supply chain satisfactorily supports all of the security principles which the service claims to implement.
Applicable risk classes: III-V
There is no customer action necessary to fulfil the requirements of this principle; these are AWS’ responsibility.