Soru

Zorluk: OrtaCompliance and Governance

A regional energy utility company is hosting its customer portal on AWS. In preparation for an upcoming regulatory audit, the company's compliance officer needs to retrieve the AWS Service Organization Control (SOC) reports to verify the security controls of the AWS physical infrastructure. Which AWS resource provides on-demand access to these compliance documents?

  1. A
    AWS Trusted Advisor
  2. AWS ArtifactCevap
  3. C
    AWS CloudTrail
  4. D
    AWS Support

Cevap

AWS Artifact
AWS Artifact is the primary, self-service portal for downloading AWS compliance documents, such as SOC and PCI reports, which are required for demonstrating compliance.

Adım Adım Çözüm

1
Identify the requirement to retrieve third-party audit reports (such as SOC reports) for AWS infrastructure.
Recognized that the auditor needs AWS-owned compliance documentation rather than customer-generated logs.
This establishes the scope of the search to AWS infrastructure compliance.
2
Evaluate AWS services that provide self-service access to security and compliance reports.
Identified AWS Artifact as the dedicated portal for compliance documentation.
This matches the requirements of obtaining audit-ready reports on-demand.

Anahtar Kavram

AWS Artifact is the central resource for downloading AWS security and compliance reports.
Tahmini Süre:1m 0s
Bu soruyu puanla