An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks. Which AWS service will provide this…

AWS Artifact is a self-service portal that provides on-demand access to AWS's security and compliance reports. Auditors and customers can use AWS Artifact to download compliance documentation, such as Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from the International Organization for Standardization (ISO). This service directly addresses the auditor's need to find evidence of whether an AWS service is compliant with specific frameworks by providing the necessary attestation documents.

B. AWS Trusted Advisor provides recommendations to optimize an AWS environment across cost, performance, and security, but it does not provide compliance reports.

C. Amazon GuardDuty is a threat detection service that monitors for malicious activity and unauthorized behavior; it is not a repository for compliance documents.

D. AWS Certificate Manager (ACM) is a service for provisioning, managing, and deploying SSL/TLS certificates. It does not provide compliance framework information.

1. AWS Artifact User Guide: "AWS Artifact is your go-to

central resource for compliance-related information that matters to you. It provides on-demand access to AWS’s security and compliance reports and select online agreements." (Source: AWS Documentation

AWS Artifact User Guide

"What is AWS Artifact?").

2. AWS Compliance Program: "AWS Artifact is a free

self-service portal that provides on-demand access to AWS compliance reports. When a report is released

it's made available in AWS Artifact for customers to download." (Source: AWS Documentation

AWS Compliance

"AWS Compliance Reports").

3. AWS Trusted Advisor Documentation: "AWS Trusted Advisor helps you optimize for cost

performance

security

fault tolerance

and service quotas." (Source: AWS Documentation

AWS Trusted Advisor

"How AWS Trusted Advisor works").

4. Amazon GuardDuty User Guide: "Amazon GuardDuty is a security monitoring service that analyzes and processes foundational data sources... GuardDuty uses threat intelligence feeds... to identify and prioritize potential threats." (Source: AWS Documentation

Amazon GuardDuty User Guide

"What is Amazon GuardDuty?").