You can now use Amazon Elasticsearch Service in applications that are subject to Service Organization Control (SOC) compliance. Amazon Elasticsearch Service is now SOC 1, 2, and 3 compliant, allowing you to get deep insight into the security processes and controls that protect customer data. SOC compliance reports are often leveraged across diverse industries, such as technology, healthcare, banking, and financial services, and used for Sarbanes-Oxley (SOX) efforts.

from Recent Announcements https://aws.amazon.com/about-aws/whats-new/2019/05/amazon-elasticsearch-service-now-soc-compliant/