AWS Artifact for Compliance Reports and Attestations

CLF-C02 By islever Editorial Last updated

Understand AWS Cloud security, governance, and compliance concepts.

Short answer

A AWS Artifact provides on-demand access to AWS security and compliance documents, including third-party attestations and certifications.

Question

Which AWS service provides users with AWS issued reports, certifications, accreditations, and third-party attestations?
  1. AWS Artifact Correct Answer
  2. AWS Trusted Advisor
  3. AWS Health Dashboard
  4. AWS Config

Key Takeaways

The question tests knowledge of AWS governance tools; the common trap is confusing Artifact with Config or Trusted Advisor, which manage resources rather than providing static compliance reports.

AWS Artifact is the dedicated service for on-demand access to AWS security and compliance documentation, including third-party attestations and certifications. This page confirms that Artifact is the correct tool for retrieving these specific regulatory reports.

Common mistake: Users often select AWS Config because it sounds like it manages configuration, but Config is for continuous monitoring of resource changes, not for downloading static audit reports like SOC or ISO.

Expert Analysis

Why the Answer Is Correct

AWS Artifact is the central repository for AWS security and compliance documents. It provides users with on-demand access to AWS’s security and compliance reports and select online agreements. These documents include third-party attestations such as PCI DSS, ISO 9001, and SOC reports, which are essential for audits and compliance verification.

Why the Other Options Are Wrong

AWS Trusted Advisor provides best practice checks for cost optimization and performance, not compliance reports. The AWS Health Dashboard displays account-specific service health events, which are unrelated to regulatory certifications. AWS Config tracks configuration changes and evaluates resource compliance against rules, but it does not host the actual issued reports and accreditations from third-party auditors.

Community Comment Notes

Community consensus strongly supports AWS Artifact, with users citing its role in accessing PCI and ISO reports. Comments confirm that Artifact is the standard tool for obtaining these security and compliance documents on demand.

Official Reference

https://aws.amazon.com/artifact/

This link opens the official vendor documentation in a new tab.

Exam Strategy

Memorize the distinct purpose of each governance service: Artifact for reports, Config for tracking changes, and Trusted Advisor for best practices. When a question asks about 'reports', 'attestations', or 'agreements', think Artifact immediately.

Frequently Asked Questions

What is the difference between AWS Artifact and AWS Config?

AWS Artifact provides static reports and agreements for compliance audits. AWS Config continuously monitors and records configuration changes of AWS resources.

Can I use AWS Trusted Advisor to get compliance reports?

No. Trusted Advisor offers best practice checks for cost and performance, not regulatory compliance reports like ISO or PCI DSS.

More CLF-C02 FAQ →

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. Naantje 👍 3
    A is correct. https://aws.amazon.com/artifact/
  2. Nikmah 👍 2 Answered A
    Artifact: Get access to compliance reports such as PCI, ISO, etc…
  3. alokdixit2006 👍 1 Answered A
    AWS Artifact: Provides on demand downloads of AWS security and compliance documents (PCI, ISO, etc
  4. ShaiTay 👍 2 Answered A
    A. AWS Artifact

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Which migration strategies move a cloud-incompatible CMS with least effort?

S-grade

Launching Third-Party IDS in AWS

S-grade

Which AWS Support Plan Offers API Access Most Cost-Effectively?

S-grade

S3 Express One Zone for Single-Digit Millisecond Latency

S-grade

Practice All CLF-C02 Questions

Access 120 questions with complete answers and detailed explanations.

View Full CLF-C02 Practice Test →

← Back to CLF-C02 Study Guide