Question #803
Which AWS service is primarily used to access compliance reports and agreements?
AWS Config
AWS Trusted Advisor
AWS Artifact
AWS Security Hub
Explanation
AWS Artifact (C) is the primary service for accessing AWS compliance reports and agreements. It provides on-demand access to AWS's compliance documentation, such as SOC reports, PCI DSS, ISO certifications, and legal agreements like the Business Associate Addendum (BAA).
Why other options are incorrect:
- A. AWS Config: Tracks resource configurations and compliance over time but does not provide compliance reports or agreements.
- B. AWS Trusted Advisor: Offers optimization recommendations (cost, security, performance) but does not host compliance documentation.
- D. AWS Security Hub: Aggregates security findings from AWS services but does not provide compliance reports.
Key Point: AWS Artifact is specifically designed for compliance documentation, making it the correct choice.
Answer
The correct answer is: C