You just joined a big IT company as an AWS security specialist. Your first assignment is to prepare for an external security audit next month. You need to understand how your company uses AWS services and whether or not they can meet security compliance. You know that AWS Artifact can help you provide security compliance evidence to the auditor. Which specific areas can AWS Artifact help you? (Select TWO.)

Answer options:

A.Service Organization Control (SOC) compliance report.
B.Security configurations in EC2 instances such as firewall rules.
C.Client side data encryption and data integrity authentication.
D.AWS ISO certifications for the AWS infrastructure and services that the company has used.
E.IAM user and role configurations such as if IAM policies meet the least privilege.

Answer: A and D
Option A is CORRECT because AWS Artifact can provide the SOC compliance report as per the requirement. Refer to Snapshot A for more details.
Option B is incorrect because it belongs to the customers’ responsibility to provide firewall rules from the Security Group or Network Access Control List (NACL).
Option C is incorrect because it belongs to the customers’ responsibility to provide information about client-side data encryption and data integrity authentication.
Option D is CORRECT because AWS Artifact can provide ISO certifications for the AWS infrastructure and services that the company has used. Refer to Snapshot B for more details.
Option E is incorrect because AWS Artifact does not provide the IAM user list and role details.
Snapshot A
Snapshot B
AWS Artifact can provide access-controlled documents relevant to compliance and security in AWS. AWS Artifact provides documents about AWS only. Customers are still responsible for obtaining documents that demonstrate the security and compliance of their companies. There is a shared responsibility between AWS and the customer for security and compliance.
For more information on the AWS shared responsibility model, kindly refer to the URL below:
https://aws.amazon.com/compliance/shared-responsibility-model/.