PRODUCTION SCENARIO
An external auditor is reviewing a company's Amazon Bedrock application and asks for AWS's SOC 2 report and ISO certifications covering the underlying infrastructure.
Where should the company obtain these documents?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: AWS Artifact
AWS Artifact provides on-demand downloads of AWS security and compliance documents, including SOC reports, PCI reports, and ISO certifications, at no charge. The company is still responsible for documenting its own controls on top of them.