AWS Security and Compliance Reports and Online Service Agreements

AWS Service for Security and Compliance Reports

Question

During an organization's information systems audit, the administrator is requested to provide a dossier of security and compliance reports and online service agreements between the organization and AWS.

Which service can they utilize to acquire this information?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer - A.

AWS Artifact is a comprehensive resource center to have access to the AWS' auditor-issued reports and security and compliance documentation from several renowned independent standard organizations.

https://aws.amazon.com/artifact/

Option B is INCORRECT.

AWS Resource Center is arepository of tutorials, whitepapers, digital training, and project use cases that aid in learning the core concepts of Amazon Web Services.

https://aws.amazon.com/getting-started/

Option C is INCORRECT.

AWS Service Catalog allows organizations to create and save their own IT service catalogs for further use.

But they have to be approved by AWS.

IT service catalogs can be multi-tiered application architectures.

https://docs.aws.amazon.com/servicecatalog/latest/adminguide/introduction.html

Option D is INCORRECT.

AWS Directory Service is an AWS tool that provides multiple ways to use Amazon Cloud Directory and Microsoft Active Directory with other AWS services.

https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html

The service that an administrator can utilize to acquire security and compliance reports and online service agreements between an organization and AWS is AWS Artifact.

AWS Artifact is a centralized repository of all the compliance documentation and reports required to satisfy various regulatory and compliance requirements. It provides on-demand access to AWS's documentation and audit reports for a range of compliance programs, including SOC, ISO, PCI, HIPAA, and more.

By using AWS Artifact, administrators can obtain various documents and reports, including service agreements, system architecture diagrams, compliance reports, and third-party assessments of AWS's compliance with various regulatory standards. Additionally, AWS Artifact allows users to easily manage and audit their own compliance with AWS services.

AWS Resource Center is a portal for accessing technical and business resources to help users with their AWS adoption and operations, but it does not provide compliance documentation or reports.

AWS Service Catalog allows administrators to create and manage catalogs of IT services that are approved for use on AWS, while AWS Directory Service is a managed service that makes it easy to connect AWS resources to an on-premises directory.

Therefore, the correct answer to the given question is A. AWS Artifact.