A county must show auditors HIPAA- and CJIS-aligned control evidence for workloads on AWS, including access to official compliance reports, while the architecture itself uses encryption and tight access controls. Which combination best aligns technologies to that compliance-evidence need?

AWS Artifact provides on-demand access to AWS compliance reports and agreements that auditors often request. Architecture still must implement encryption (KMS) and access controls appropriate to HIPAA/CJIS-aligned designs. Artifact alone without technical controls—or public exposure of sensitive data—does not satisfy compliance alignment.