This paragraph might need updating:
AWS is IRAP certified by accredited by the Australian Signals Directorate up to Unclassified DLM, and are listed on the ASD Certified Cloud Services List (CCSL).
Most (but not all) AWS services are accredited up to IRAP-PROTECTED (https://aws.amazon.com/compliance/services-in-scope/).
Is it worth mentioning the specific AWS services used by cloud.gov.au that might not be on the 'PROTECTED' list (if any)?
In either case, the phrasing might benefit from updating to:
AWS is IRAP accredited by the Australian Signals Directorate up to Unclassified DLM, and are listed on the ASD Certified Cloud Services List (CCSL).
This paragraph might need updating:
Most (but not all) AWS services are accredited up to IRAP-PROTECTED (https://aws.amazon.com/compliance/services-in-scope/).
Is it worth mentioning the specific AWS services used by cloud.gov.au that might not be on the 'PROTECTED' list (if any)?
In either case, the phrasing might benefit from updating to: