Examkin

Question

Difficulty: MediumCompliance and Governance

A biotechnology startup is preparing to host sensitive clinical trial data on AWS. To satisfy regulatory requirements, the startup's compliance team must review AWS's third-party audit reports detailing the physical security and environmental controls of the AWS data centers. Which AWS service should the startup use to retrieve these documents?

  1. AWS ArtifactAnswer
  2. B
    AWS Config
  3. C
    AWS Trusted Advisor
  4. D
    AWS CloudTrail

Answer

AWS Artifact
AWS Artifact is the primary self-service portal for on-demand access to AWS's compliance reports, such as SOC and ISO reports, and agreements like the Business Associate Addendum (BAA).

Step-by-Step Solution

1
Identify the core requirement of the biotechnology startup, which is to retrieve third-party audit reports of AWS infrastructure.
The startup needs access to AWS compliance reports like SOC 2 or ISO certificates.
These documents prove the security and compliance of the underlying AWS infrastructure.
2
Evaluate the available AWS services to determine which one functions as a portal for compliance documentation.
AWS Artifact is identified as the portal providing on-demand download of AWS compliance agreements and reports.
It is the direct, secure portal where customers access security and compliance documents provided by AWS.

Key Concept

AWS Artifact provides on-demand access to AWS security and compliance reports and select online agreements.
Rate this question

Topics

Compliance and Governance

More questions from this topic