Examkin

Question

Difficulty: EasyCompliance and Governance

A real estate platform is preparing for an external security audit and needs to download official compliance reports, such as ISO certifications and Service Organization Control (SOC) reports, to prove the security of the AWS infrastructure. Which AWS service should the platform use to access these documents?

  1. A
    Amazon Inspector
  2. B
    AWS CloudTrail
  3. AWS ArtifactAnswer
  4. D
    Amazon GuardDuty

Answer

AWS Artifact
AWS Artifact is the central resource for secure, on-demand compliance reports and agreements. It allows customers to download AWS security and compliance documents, such as SOC and ISO reports, to share with their auditors.

Step-by-Step Solution

1
Identify the primary requirement in the scenario, which is to retrieve third-party compliance reports and certificates (such as ISO and SOC) for the AWS infrastructure.
The platform needs a service that provides secure, on-demand download capabilities for AWS's compliance documents.
AWS manages physical security and infrastructure compliance, and shares these audit reports with customers to help them meet their compliance requirements.
2
Compare the available AWS services and select the correct repository for these compliance documents.
AWS Artifact is identified as the portal designed specifically for retrieving these documents.
AWS Artifact provides on-demand access to AWS's security and compliance reports, whereas services like Amazon Inspector, AWS CloudTrail, and Amazon GuardDuty perform runtime vulnerability scans, API auditing, and threat detection respectively.

Key Concept

AWS Artifact is the primary portal for secure, on-demand compliance reports and agreements.
Estimated Time:45s
Rate this question

Topics

Compliance and Governance

More questions from this topic