PRODUCTION SCENARIO
An external auditor reviewing a company's Amazon Bedrock application asks for AWS's SOC 2 report and ISO certifications covering the underlying infrastructure.
Which AWS service will meet this requirement?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: AWS Artifact
AWS Artifact provides on-demand downloads of AWS security and compliance documents, including SOC, PCI, and ISO reports, free of charge, and these can be submitted to auditors as audit artifacts. Audit Manager collects evidence about the customer's own controls, not AWS's. Trusted Advisor checks an account against best practices. AWS Config evaluates whether resources match rules you configure, which documents your controls rather than AWS's infrastructure.