📖 What is AWS Artifact?
AWS Artifact is a self-service portal that provides on-demand access to AWS compliance reports and select online agreements. It allows users to download security and compliance documentation, such as SOC and PCI reports, to verify that AWS services meet the regulatory requirements of their industry.
"Whenever you see 'compliance reports,' 'audit documents,' or 'SOC/PCI reports' in a question, AWS Artifact is your go-to service."
📚 Certification: AWS Certified Solutions Architect - Associate (SAA-C03)
🔑 What are the Key Concepts of AWS Artifact?
- ▸ Provides on-demand access to AWS compliance reports, such as SOC and PCI, to prove the security posture of the underlying cloud infrastructure.
- ▸ Allows users to review and electronically accept AWS Artifact Agreements, including the Business Associate Addendum (BAA) required for HIPAA compliance.
- ▸ Supports the shared responsibility model by providing evidence for the 'Security of the Cloud' portion of a customer's regulatory audit.
- ▸ Offers a centralized, self-service portal that removes the need to manually request compliance documentation from AWS support teams.
🎯 How does AWS Artifact appear on the SAA-C03 Exam?
A scenario might describe a company undergoing a third-party regulatory audit and needing to provide official documentation proving that the underlying AWS infrastructure meets SOC 2 or PCI DSS standards to satisfy their auditors.
You may be asked to identify the correct service to use when a healthcare organization needs to review and electronically sign a Business Associate Addendum (BAA) to ensure their environment is HIPAA compliant.
❓ Frequently Asked Questions
Does AWS Artifact automatically make my application compliant with HIPAA or PCI?
No. AWS Artifact provides reports proving the infrastructure is compliant. You are still responsible for configuring your application, encryption, and access controls to meet the specific regulatory requirements of your industry.
How does AWS Artifact differ from AWS Audit Manager?
AWS Artifact provides AWS's own compliance reports for the infrastructure. AWS Audit Manager is a tool that helps you continuously audit your own AWS resource usage to gather evidence for your own audits.