Source: https://confluence.ucop.edu/download/attachments/180060250/AWS_Risk_and_Compliance_Whitepaper.pdf