Question

Difficulty: EasyCompliance and Governance

A logistics company is onboarding a new shipping partner that requires proof of AWS's ISO 9001 compliance. Which AWS service should the company use to download the required audit reports and certifications?

  1. A
    Amazon Inspector
  2. AWS ArtifactAnswer
  3. C
    AWS Systems Manager
  4. D
    AWS CloudTrail

Answer

AWS Artifact
AWS Artifact is the correct service because it serves as the central, self-service portal for downloading AWS compliance reports, including SOC reports, PCI DSS agreements, and ISO certifications.

Step-by-Step Solution

1
Identify the business requirement for obtaining AWS's third-party audit reports and compliance certificates.
The requirement is to retrieve official certifications (such as ISO 9001) for AWS infrastructure.
This determines which type of service or portal is needed to retrieve official security documentation.
2
Select the specific AWS tool designed as a central repository for compliance documentation.
AWS Artifact is the designated portal providing on-demand access to AWS compliance reports.
AWS Artifact allows customers to download compliance documents to share with auditors or business partners.

Key Concept

AWS Artifact is the primary portal for retrieving AWS compliance reports and agreements.
Estimated Time:45s
Rate this question