Security, Identity, and Compliance
AWS Artifact
A self-service portal for downloading AWS compliance reports and managing selected agreements.
Key points
- Artifact provides documents such as third-party audit reports and certifications.
- Reports describe AWS controls; customers still evaluate and document their own compliance responsibilities.
- Artifact does not monitor resources or aggregate security findings.
Best-known use cases
- Obtain an AWS compliance report for an audit.
- Review or accept supported AWS agreements.
What candidates often confuse it with
- Artifact supplies AWS compliance documents; Config records resource configuration history.
- Security Hub aggregates security findings; Artifact is evidence about AWS compliance programs.
Key Cloud Practitioner takeaway
When an auditor asks for an AWS compliance report, start with AWS Artifact.
Related services
- AWS Config
- AWS Security Hub
Relevant exam tasks
- D2.2