Explanation
AWS Artifact is the correct answer because it is AWS's centralized resource for compliance-related information. Here's why:
What is AWS Artifact?
- AWS Artifact is a self-service portal for on-demand access to AWS's compliance reports and certifications
- It provides access to various compliance documents including PCI DSS, SOC reports, ISO certifications, and more
- Customers can download these documents directly for audit and compliance purposes
Why not the other options?
- AWS Organizations: A service for managing multiple AWS accounts, not for compliance documentation
- AWS Trusted Advisor: Provides best practice recommendations for cost optimization, performance, security, and fault tolerance, but doesn't provide formal compliance documentation
- AWS Support Center: Primarily for technical support and service requests, not compliance documentation
Key Benefits of AWS Artifact:
- On-demand access: Available 24/7 without needing to contact AWS Support
- Comprehensive documentation: Includes PCI DSS, HIPAA, GDPR, SOC 1/2/3, ISO 27001, and many other compliance frameworks
- Direct downloads: Customers can download reports immediately for audit preparation
- Free service: No additional cost to access compliance documentation
For PCI DSS compliance specifically, AWS Artifact provides the Attestation of Compliance (AOC) and Responsibility Summary documents that clearly outline AWS's compliance status and shared responsibility model.