CLF-C02 Practice Question 5: Compliance Reports
AWS Certified Cloud Practitioner (CLF-C02) · Test 1 · question 5 of 10
An auditor has asked a company for AWS's latest SOC 2 and PCI DSS compliance reports as evidence for its own audit. Which AWS service provides on-demand access to these reports?
Show answer and explanation
Answer:
AWS Artifact is the self-service portal for on-demand access to AWS security and compliance documentation (SOC reports, PCI DSS attestations, ISO certifications), and for reviewing and accepting agreements such as the Business Associate Addendum.
Option A, Trusted Advisor, inspects your own account and recommends improvements across cost, performance, security, fault tolerance, service limits, and operational excellence; it does not publish AWS audit reports. Option C, Amazon Inspector, continuously scans your workloads (EC2 instances, container images, Lambda functions) for software vulnerabilities and unintended network exposure. Option D, CloudTrail, records API activity in your account for governance and auditing of *your* actions, not AWS's third-party attestations.
Reference: AWS Artifact