Organizations seeking robust security and compliance for their workloads running in the cloud can now benefit from a significant advancement. A key operating system widely used in cloud environments has officially achieved FIPS 140-3 validation.
This validation confirms that the cryptographic modules within this specific operating system release meet the stringent security requirements set by the National Institute of Standards and Technology (NIST) in the United States and the Communications Security Establishment (CSE) in Canada. Achieving FIPS 140-3 status is crucial for many industries, especially those operating in regulated environments, such as government agencies, healthcare, and finance.
The validation specifically covers the critical cryptographic components that handle encryption, decryption, hashing, and other security-sensitive operations. By using an operating system with validated cryptographic modules, organizations can simplify their journey towards achieving compliance with various security mandates that require the use of FIPS 140-validated cryptography.
This development provides users with increased confidence in the security posture of their applications and data when deployed on this platform. It assures that the underlying cryptographic functions utilized by the operating system itself, and by applications relying on the system’s cryptographic libraries, adhere to globally recognized security standards. This enhancement makes it easier for developers and system administrators to build and maintain secure, compliant systems without the burden of validating individual cryptographic implementations themselves at the operating system level.
The availability of this FIPS 140-3 validated version underscores a strong commitment to providing a secure and standards-compliant platform for cloud workloads, essential for meeting today’s demanding regulatory and security challenges.
Source: https://www.helpnetsecurity.com/2025/06/20/amazon-linux-2023-achieves-fips-140-3-validation/
