Examkin

Question

Difficulty: HardCompliance and Governance

A human resources software provider hosting its applications on AWS is undergoing an external compliance audit. The provider must officially accept a global Data Processing Addendum (DPA) with AWS and obtain the official ISO 27001 certification report for the underlying AWS data center infrastructure. Which AWS service should the provider use to satisfy both of these requirements?

  1. A
    Amazon Inspector
  2. B
    AWS Systems Manager
  3. AWS ArtifactAnswer
  4. D
    AWS CloudTrail

Answer

AWS Artifact is the correct service because it serves as the central resource for retrieving AWS compliance reports and managing compliance agreements.
The correct option is AWS Artifact. AWS Artifact contains two main sections: AWS Artifact Reports, which provides on-demand downloads of AWS security and compliance reports (such as ISO certifications and SOC reports), and AWS Artifact Agreements, which allows customers to review and accept agreements (such as the Data Processing Addendum) on behalf of their AWS accounts.

Step-by-Step Solution

1
Identify the primary requirement: retrieving official AWS compliance documentation (ISO 27001 certification) and accepting a legal agreement (Data Processing Addendum) with AWS.
Recognize that these are standard compliance tasks involving AWS-managed infrastructure audits and terms of service.
AWS manages and audits its own physical infrastructure, providing these reports and agreements to customers for their compliance verification.
2
Evaluate the capabilities of AWS Artifact.
AWS Artifact Reports provides the ISO certification, and AWS Artifact Agreements allows accepting the Data Processing Addendum.
AWS Artifact is specifically designed as the self-service portal for compliance-related documents and agreements.

Key Concept

AWS Artifact is the self-service portal that provides on-demand access to AWS compliance reports and allows customers to accept agreements with AWS.
Rate this question

Topics

Compliance and Governance

More questions from this topic