Obtaining PCI Reports via AWS Artifact
A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of AWS governance and compliance tools, specifically distinguishing between the general support process and the dedicated self-service reporting portal.
AWS Artifact is the centralized portal for on-demand access to AWS compliance reports, including Payment Card Industry (PCI) attestations of compliance. This question establishes that customers should use Artifact rather than support channels to retrieve these specific security documentation.
Candidates often incorrectly choose 'Contact AWS Support' because they assume all official documentation requests must go through a ticketing system, failing to recognize the self-service nature of Artifact.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
AWS Artifact is the correct choice because it provides on-demand access to AWS's security and compliance documents, such as SOC, PCI DSS, and ISO certifications. It is designed specifically for customers to download these reports without needing to open a support case.Why the Other Options Are Wrong
Contacting AWS Support (A) or a Technical Account Manager (D) is unnecessary for standard compliance reports, as these are publicly available to customers via Artifact. AWS Security Hub (C) aggregates security findings and posture data but does not host the static third-party audit reports like PCI DSS Attestations of Compliance.Community Comment Notes
Community consensus strongly supports this answer, with users noting that "AWS Artifact offers on-demand access to ASW's compliance and security documentation." The votes reflect a clear understanding that Artifact is the designated tool for this task.Official Reference
Exam Strategy
Always associate 'compliance reports' and 'audit documents' with AWS Artifact. If a question asks about downloading SOC, PCI, or HIPAA reports, Artifact is almost always the correct answer over Support or Security Hub.
Frequently Asked Questions
Why not contact AWS Support for PCI reports?
Support is for troubleshooting and technical issues. Compliance reports are pre-generated and available instantly via the self-service Artifact portal.
Does AWS Security Hub provide PCI DSS reports?
No. Security Hub monitors your environment's configuration and security posture against standards, but it does not host the vendor's attestation reports.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →