Frameworks · Global standards
AWS Foundational Technical Review
The AWS Foundational Technical Review (FTR) assesses an AWS Partner's solution against AWS best practices for security, performance and operational processes. AWS considers these practices the most critical for customer success. Partners must pass the review to access several partner benefits, including the AWS Competency and ISV Accelerate programmes.
Who it applies to
It applies to software and services partners in the AWS Partner Network that want to list, co-sell or join competency programmes.
Main requirements
Security
The review checks root account protection, identity and access, logging, encryption and network controls on the solution's AWS accounts.
Reliability
The review checks the backup, recovery and resilience of the solution's architecture.
Operations
The review checks monitoring, incident response, change and support processes.
Customer data
The review checks how the solution handles and isolates customer data.
How xmodo supports it
- 1
Review requirements are set up as controls, with evidence collected through the AWS integration, so the self-assessment reflects your live AWS environment.
- 2
Requirements map to SOC 2 and ISO/IEC 27001, which already satisfy most FTR requirements.
Related frameworks
AWS Foundational Technical Review shares requirements with the frameworks below. Controls you already run for any of them count towards AWS Foundational Technical Review as well.
Frequently asked questions
How often is the FTR renewed?
AWS requires the review to be renewed periodically. xmodo records the renewal date as an evidence expiry date and creates a task before the review lapses.