Examkin

Question

Difficulty: MediumCompliance and Governance

A digital marketing agency needs to retrieve the AWS Service Organization Control (SOC) reports to satisfy a client's security questionnaire about the underlying cloud infrastructure. Which AWS tool or service should the agency use to obtain these official documents?

  1. A
    Amazon Inspector
  2. B
    AWS CloudTrail
  3. AWS ArtifactAnswer
  4. D
    AWS Support Console, to request that AWS perform an audit on the agency's resources and generate the compliance reports

Answer

AWS Artifact
AWS Artifact is the central repository that provides customers with free, on-demand access to AWS security and compliance reports (such as SOC and PCI reports) as well as select online agreements. This allows the agency to retrieve and share official documentation about the compliance of the underlying AWS infrastructure.

Step-by-Step Solution

1
Identify the request for third-party compliance documentation, specifically SOC reports, regarding the underlying AWS infrastructure.
The requirement is to obtain official, pre-audited compliance reports for the cloud platform.
External clients need proof of cloud infrastructure compliance to meet their security requirements.
2
Determine which AWS service acts as a self-service repository for retrieving compliance reports and agreements.
AWS Artifact is identified as the portal providing on-demand access to compliance reports.
AWS Artifact allows customers to download SOC, PCI, and ISO reports directly.

Key Concept

AWS Artifact provides on-demand, self-service access to AWS compliance reports and security documents.
Rate this question

Topics

Compliance and Governance

More questions from this topic