Examkin

Question

Difficulty: MediumCompliance and Governance

A regional energy utility company is hosting its customer portal on AWS. In preparation for an upcoming regulatory audit, the company's compliance officer needs to retrieve the AWS Service Organization Control (SOC) reports to verify the security controls of the AWS physical infrastructure. Which AWS resource provides on-demand access to these compliance documents?

  1. A
    AWS Trusted Advisor
  2. AWS ArtifactAnswer
  3. C
    AWS CloudTrail
  4. D
    AWS Support

Answer

AWS Artifact
AWS Artifact is the primary, self-service portal for downloading AWS compliance documents, such as SOC and PCI reports, which are required for demonstrating compliance.

Step-by-Step Solution

1
Identify the requirement to retrieve third-party audit reports (such as SOC reports) for AWS infrastructure.
Recognized that the auditor needs AWS-owned compliance documentation rather than customer-generated logs.
This establishes the scope of the search to AWS infrastructure compliance.
2
Evaluate AWS services that provide self-service access to security and compliance reports.
Identified AWS Artifact as the dedicated portal for compliance documentation.
This matches the requirements of obtaining audit-ready reports on-demand.

Key Concept

AWS Artifact is the central resource for downloading AWS security and compliance reports.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic