Obtaining PCI Reports via AWS Artifact

CLF-C02 By islever Editorial Last updated Oct 13, 2026

Understand AWS Cloud security, governance, and compliance concepts.

Short answer

B Download reports from AWS Artifact.

Question

A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?

Contact AWS Support.
Download reports from AWS Artifact. Correct Answer
Download reports from AWS Security Hub.
Contact an AWS technical account manager (TAM).

Key Takeaways

The question tests knowledge of AWS governance and compliance tools, specifically distinguishing between the general support process and the dedicated self-service reporting portal.

AWS Artifact is the centralized portal for on-demand access to AWS compliance reports, including Payment Card Industry (PCI) attestations of compliance. This question establishes that customers should use Artifact rather than support channels to retrieve these specific security documentation.

Common mistake: Candidates often incorrectly choose 'Contact AWS Support' because they assume all official documentation requests must go through a ticketing system, failing to recognize the self-service nature of Artifact.

Expert Analysis

Why the Answer Is Correct

AWS Artifact is the correct choice because it provides on-demand access to AWS's security and compliance documents, such as SOC, PCI DSS, and ISO certifications. It is designed specifically for customers to download these reports without needing to open a support case.

Why the Other Options Are Wrong

Contacting AWS Support (A) or a Technical Account Manager (D) is unnecessary for standard compliance reports, as these are publicly available to customers via Artifact. AWS Security Hub (C) aggregates security findings and posture data but does not host the static third-party audit reports like PCI DSS Attestations of Compliance.

Community Comment Notes

Community consensus strongly supports this answer, with users noting that "AWS Artifact offers on-demand access to ASW's compliance and security documentation." The votes reflect a clear understanding that Artifact is the designated tool for this task.

Official Reference

https://aws.amazon.com/artifact/

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always associate 'compliance reports' and 'audit documents' with AWS Artifact. If a question asks about downloading SOC, PCI, or HIPAA reports, Artifact is almost always the correct answer over Support or Security Hub.

Frequently Asked Questions

Why not contact AWS Support for PCI reports?

Support is for troubleshooting and technical issues. Compliance reports are pre-generated and available instantly via the self-service Artifact portal.

Does AWS Security Hub provide PCI DSS reports?

No. Security Hub monitors your environment's configuration and security posture against standards, but it does not host the vendor's attestation reports.

More CLF-C02 FAQ →

Community Votes

100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

geocis 👍 1 Answered B

AWS Artifact offers on-demand access to ASW's compliance and security documentation.
Meow7 👍 1

AWS Artifact is correct. Please help with discussion on 542 ~ 544 549. Thanks.
ShaiTay 👍 1 Answered B

B. Download reports from AWS Artifact.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All CLF-C02 Questions

Access 120 questions with complete answers and detailed explanations.

View Full CLF-C02 Practice Test →

← Back to CLF-C02 Study Guide