Question

Difficulty: EasyCompliance and Governance

An online retail company is preparing for its annual security audit. The internal compliance team needs to access and download official AWS security and compliance documents, such as SOC reports and ISO certifications, to verify the security posture of the AWS infrastructure. Which AWS service or portal provides on-demand access to these compliance reports?

  1. A
    AWS CloudTrail
  2. AWS ArtifactAnswer
  3. C
    Amazon GuardDuty
  4. D
    AWS Trusted Advisor

Answer

AWS Artifact
AWS Artifact is the central resource for compliance-related information. It provides on-demand access to AWS security and compliance reports (such as SOC, ISO, and PCI reports) and allows customers to accept agreements with AWS.

Step-by-Step Solution

1
Identify the core requirement of the retail company.
The company needs to download official AWS compliance documents, including SOC reports and ISO certifications.
This is a compliance auditing task rather than account activity logging or security threat monitoring.
2
Determine which AWS service acts as the central repository for compliance documentation.
AWS Artifact is the designated portal where customers can download AWS compliance reports and sign agreements.
AWS Artifact provides on-demand access to these reports at no additional cost.

Key Concept

AWS Artifact is the self-service portal that provides on-demand access to AWS compliance reports, such as Service Organization Control (SOC) and Payment Card Industry (PCI) reports, as well as agreements.
Rate this question