A company uses AWS to run a web application that manages ticket sales in several countries. The company recently migrated the application to an…

AWS Audit Manager is the purpose-built AWS service for simplifying how customers assess risk and compliance with regulations and industry standards. It provides prebuilt frameworks, such as PCI DSS v4.0, which map AWS resources to the requirements of the standard. Audit Manager automates the collection of evidence from AWS services and, crucially, allows users to upload and attach manual evidence. This directly addresses the compliance team's need to add their own documentation. Finally, it generates detailed assessment reports that consolidate both automated and manual evidence, fulfilling the core requirements of the question.

A. AWS Trusted Advisor provides best-practice recommendations but does not offer a structured framework for PCI DSS compliance, nor does it have a feature to add manual evidence or generate formal audit reports.

B. AWS Config with conformance packs is used for assessing resource configurations against best practices. While it provides evidence for automated checks, it is not designed for managing a full audit or incorporating manual evidence.

C. AWS Security Hub aggregates security findings and checks against standards like PCI DSS. However, its primary function is security posture management, not end-to-end audit management with manual evidence collection and report generation.

1. AWS Audit Manager User Guide - What Is AWS Audit Manager?: "AWS Audit Manager helps you to continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards... You can also customize frameworks and controls in Audit Manager to meet your specific business requirements... Audit Manager collects evidence from two sources: automated and manual." This confirms its role in automated and manual evidence collection for compliance.

2. AWS Audit Manager User Guide - Standard frameworks: This page lists "Payment Card Industry Data Security Standard (PCI DSS) v4.0" as a supported standard framework, directly addressing the question's requirement.

3. AWS Audit Manager User Guide - Working with evidence: "When you create an assessment, Audit Manager automatically starts to collect evidence from your AWS accounts and services... In addition to the automated evidence that Audit Manager collects, you can also upload your own files as manual evidence." This explicitly confirms the capability to add manual evidence.

4. AWS Audit Manager User Guide - Generating assessment reports: "After you review the evidence in your assessment and make sure that it's ready for an audit, you can generate an assessment report. An assessment report is a finalized document that summarizes the relevant evidence that's collected for your audit." This confirms the reporting capability.