Get Your CertAIF-C01PlayCompete
‹ All AIF-C01 questions

AIF-C01 Practice Question 60: Compliance Report for Auditor

AWS Certified AI Practitioner (AIF-C01) · Test 6 · question 10 of 10

Security, Compliance, and Governance for AI Solutionseasy

An external auditor reviewing a startup's Amazon Bedrock based product asks for evidence that the underlying AWS infrastructure is covered by an independent SOC report. The startup has no such report for the AWS layer itself. Where should it obtain one?

Select one answer
Show answer and explanation

Answer:

  • B. Download the report from AWS Artifact, the on-demand portal for AWS compliance documents

AWS Artifact *provides on-demand downloads of AWS security and compliance documents*; AWS names SOC reports, ISO standards and PCI Security Standards specifically, along with certifications from accreditation bodies. AWS adds that you can *submit AWS Artifact documents to your auditors or regulators as audit artifacts*, and the documents are free. This is the customer's half of the shared responsibility model: AWS evidences the cloud, you evidence what you built in it (option B).

- A is wrong because CloudTrail records who did what in your account. That is an activity trail of your own API calls, not an independent auditor's assessment of AWS's controls. - C is wrong because Trusted Advisor checks *your* resources against AWS best practices for cost, performance, security and resilience. Useful hygiene, but it audits your configuration, not AWS's infrastructure. - D is wrong because model invocation logging captures your application's prompts and completions. That is workload data (arguably sensitive data you would not hand over), and it says nothing about AWS's compliance posture.

Reference: What is AWS Artifact?

Practice Test 6 ›

Study guides for AIF-C01

AI engineer roadmap 2026: skills, certs and the orderAI engineer roadmap for 2026: skills to learn in order, AI engineer vs ML engineer, which certifications fit each stage, and what to skip.
How AI Is Changing Software Jobs: Where to PrepareHow AI is changing software jobs: what history shows, the evidence on junior developers, what Klarna learned, new AI roles and five domains to prepare for.
How AWS Certification Exams Work: Scoring and RenewalHow AWS certification exams work: levels, booking, question types, unscored questions, scaled scores, pass marks, validity and how recertification works.
What Is Amazon Bedrock? Models, Pricing and GuardrailsWhat is Amazon Bedrock? How a request reaches a model, what happens to your data, token pricing, Guardrails, Knowledge Bases, AgentCore and the exam traps.
Google Cloud Generative AI Leader vs AWS AI PractitionerGoogle Cloud Generative AI Leader vs AWS AI Practitioner: format, cost, topics, free preparation and which certification to take first.
AWS certification cost in 2026, and free ways to prepareWhat every AWS certification costs in 2026 in USD and INR, retake and reschedule rules, the 50% voucher, and the free official ways to prepare.
AWS Generative AI Developer Professional (AIP-C01) guideWhat the AWS Certified Generative AI Developer – Professional (AIP-C01) exam covers - format, cost, the five domains, the services, and how to prepare.
Best AI certifications 2026: AWS, Google, Microsoft, ClaudeThe best AI certifications in 2026 from AWS, Google, Microsoft, Claude and Databricks, by level, with price, status and which one to take first.
Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.
What Is RAG? How Retrieval-Augmented Generation WorksWhat RAG is and how it works: chunking, embeddings, vector search, hybrid search, reranking, GraphRAG and agentic RAG on AWS, Google and Azure.
Prompt engineering vs RAG vs fine-tuningWhen to use prompt engineering, retrieval-augmented generation, fine-tuning or continued pre-training, compared on cost, freshness, hallucination and privacy.