A county compliance office wants continuous collection of evidence mapped to a controls framework instead of last-minute screenshot hunts before audits. Which AWS service should the architect include for automated evidence gathering?
Select an answer to reveal the explanation.
Short Explanation
Audits hate scavenger hunts. Audit Manager keeps gathering evidence against a framework so staff are not hunting screenshots the night before. QuickSight charts and mailed hard drives are not continuous control evidence automation.
Full Explanation
County compliance teams that want continuous evidence mapped to a controls framework should include AWS Audit Manager. Audit Manager automates collection and organization of evidence against prebuilt or custom frameworks so staff are not scrambling for screenshots the night before an audit. For municipal programs under recurring assessments, continuous evidence gathering reduces operational risk and improves consistency versus ad-hoc artifact hunts.
Amazon QuickSight alone is a visualization and BI service, not an automated compliance evidence repository tied to control frameworks. Shipping Snowball Edge devices monthly with printed reports is a physical logistics process, not continuous cloud control evidence automation, and it cannot keep pace with configuration drift. Amazon Mechanical Turk photographing consoles weekly is manual, error-prone theater that does not map cleanly to AWS control evidence APIs.
Exam caveat: do not confuse Audit Manager (evidence collection) with Security Hub (finding aggregation), Config (configuration recording), or Artifact (AWS compliance reports). Operational check: enable Audit Manager with the relevant framework, confirm automated evidence is populating for in-scope accounts, assign owners for manual evidence slots, and export a sample assessment package before the next real audit window.