AWS Artifact
AWS compliance report library
A self-service portal for downloading AWS compliance reports (SOC, PCI, ISO…) and reviewing/accepting agreements such as the BAA for HIPAA.
- Cost$ Low
- Difficulty●●●●●
- Costs money when idle?No
- Serverless
- In examsCLF
Think of it asLike a vendor's archive room of quality certificates.
When to use it
✓ Use it when
Auditors need compliance evidence for the AWS infrastructure.
✗ Avoid it when
You need to collect compliance evidence for your own workloads → Audit Manager.
Common uses
- Downloading SOC 2 reports for an audit
- Signing a BAA before processing healthcare data
- Providing ISO certificates to customers
What does it cost?
- Pricing model: Free.
