A smart-vehicle manufacturer is launching an autonomous fleet management platform on AWS. To meet regional regulatory requirements, the manufacturer's legal department must execute a Business Associate Addendum (BAA) with AWS, and the risk assessment team must download the ISO/IEC 27001 certification report for the AWS physical infrastructure. Which AWS resource should the manufacturer use to accept this online agreement and retrieve the required certification?
- AAWS Systems Manager, which enables the manufacturer to patch physical hosting servers and retrieve infrastructure audit logs.
- BAWS Audit Manager, which automatically assesses active workloads to execute organizational agreements and retrieve AWS's compliance documents.
- AWS Artifact, which provides on-demand access to AWS security and compliance reports and allows customers to accept online agreements.Answer
- DAWS CloudTrail, which logs API calls to automatically authorize regulatory compliance agreements and verify resource configurations.
Answer
AWS Artifact, which provides on-demand access to AWS security and compliance reports and allows customers to accept online agreements.
AWS Artifact is the primary portal for retrieving AWS's independent compliance reports (such as ISO/IEC 27001 and SOC reports) and formally accepting online agreements (such as the Business Associate Addendum) on behalf of AWS accounts.
Step-by-Step Solution
Key Concept
AWS compliance reports and agreements portal