AWS Artifact for Compliance Reports and Attestations
Which AWS service provides users with AWS issued reports, certifications, accreditations, and third-party attestations?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of AWS governance tools; the common trap is confusing Artifact with Config or Trusted Advisor, which manage resources rather than providing static compliance reports.
AWS Artifact is the dedicated service for on-demand access to AWS security and compliance documentation, including third-party attestations and certifications. This page confirms that Artifact is the correct tool for retrieving these specific regulatory reports.
Users often select AWS Config because it sounds like it manages configuration, but Config is for continuous monitoring of resource changes, not for downloading static audit reports like SOC or ISO.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
AWS Artifact is the central repository for AWS security and compliance documents. It provides users with on-demand access to AWS’s security and compliance reports and select online agreements. These documents include third-party attestations such as PCI DSS, ISO 9001, and SOC reports, which are essential for audits and compliance verification.Why the Other Options Are Wrong
AWS Trusted Advisor provides best practice checks for cost optimization and performance, not compliance reports. The AWS Health Dashboard displays account-specific service health events, which are unrelated to regulatory certifications. AWS Config tracks configuration changes and evaluates resource compliance against rules, but it does not host the actual issued reports and accreditations from third-party auditors.Community Comment Notes
Community consensus strongly supports AWS Artifact, with users citing its role in accessing PCI and ISO reports. Comments confirm that Artifact is the standard tool for obtaining these security and compliance documents on demand.Official Reference
Exam Strategy
Memorize the distinct purpose of each governance service: Artifact for reports, Config for tracking changes, and Trusted Advisor for best practices. When a question asks about 'reports', 'attestations', or 'agreements', think Artifact immediately.
Frequently Asked Questions
What is the difference between AWS Artifact and AWS Config?
AWS Artifact provides static reports and agreements for compliance audits. AWS Config continuously monitors and records configuration changes of AWS resources.
Can I use AWS Trusted Advisor to get compliance reports?
No. Trusted Advisor offers best practice checks for cost and performance, not regulatory compliance reports like ISO or PCI DSS.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →