An external auditor asks where the city can download AWS compliance reports and security/compliance agreements. Which AWS resource should staff use?
Select an answer to reveal the explanation.
Short Explanation
Auditors want the official paperwork drawer, not a threat-finding screen or a random public bucket. AWS Artifact is that drawer — compliance reports and agreements on demand. GuardDuty and instance metadata solve different problems.
Full Explanation
AWS Artifact is the self-service portal where customers obtain AWS compliance reports and related agreements. GuardDuty provides threat detection findings, not the primary library of AWS audit reports. EC2 instance metadata and public S3 sample buckets are not the designated source for AWS compliance attestation packages.