A municipal CISO wants one official place to download AWS compliance artifacts before the annual external audit. Which service should the CISO use?
Select an answer to reveal the explanation.
Short Explanation
Before the auditors arrive, the CISO wants the real AWS compliance packets in one portal — that portal is Artifact. Polly speaks text, Wavelength brings compute closer to users, and WorkSpaces is a desktop service; none is the compliance document library.
Full Explanation
AWS Artifact provides on-demand AWS compliance reports and related agreements for customer review — the official portal a municipal CISO should use to download AWS compliance artifacts before the annual external audit. Amazon Polly synthesizes speech from text; it does not host SOC packages. AWS Wavelength brings compute closer to users at the edge; it is not the SOC document store. Amazon WorkSpaces delivers virtual desktops; it is not the mandatory portal for all AWS audit letters. Distractors fail by mixing speech, edge compute, and VDI products with the compliance artifact library. Exam caveat: Artifact covers AWS attestations; the city must still assemble evidence for its own controls, configurations, and processes under shared responsibility. Operational check: ensure CISO delegates have Artifact access before fieldwork, download current reports for in-scope services, file them in the GRC repository, brief auditors on what Artifact does and does not prove, and refresh packets when AWS publishes updates. In practice, keep an Artifact download checklist tied to the services listed in the city's system inventory so auditors receive current packets without last-minute portal hunting.