AWS Certified AI Practitioner · Free Practice Question Medium
Question 8
A financial services company relies on several Independent Software Vendors (ISVs) for key operational applications and needs to maintain up-to-date compliance records to meet regulatory requirements. To streamline its compliance management process, the company wants to receive email notifications whenever new ISV compliance reports, such as SOC 2 or ISO certifications, become available, ensuring that its compliance team is promptly informed and can take necessary actions.
Which AWS service would be most suitable for automatically providing these notifications?
-
A
The company should use AWS Config to enable continuous monitoring of AWS resource configurations to ensure compliance with best practices and internal policies. Leverage the ntegration with Amazon Simple Notification Service (Amazon SNS) to receive notifications when the compliance reports are available
-
B
The company should use AWS Audit Manager and leverage its integration with Amazon Simple Notification Service (Amazon SNS) to receive notifications when the compliance reports are available
-
C
The company should use AWS Trusted Advisor to receive notification alerts for best practices and recommendations to optimize AWS resources
-
D
The company should use AWS Artifact to facilitate on-demand access to AWS compliance reports and agreements, as well as allow users to receive notifications when new compliance documents or reports, including ISV compliance reports, are available
Reveal correct answer
Correct answer: D
Explanation
Correct option:
The company should use AWS Artifact to facilitate on-demand access to AWS compliance reports and agreements, as well as allow users to receive notifications when new compliance documents or reports, including ISV compliance reports, are available
This is the correct option because AWS Artifact is specifically designed to provide access to a wide range of AWS compliance reports, including those from Independent Software Vendors (ISVs). AWS Artifact allows users to configure settings to receive notifications when new compliance documents or reports are available. This capability makes it an ideal choice for a company that needs timely email alerts regarding the availability of ISV compliance reports.
The new third-party reports tab on the AWS Artifact Reports page provides on-demand access to security compliance reports of Independent Software Vendors (ISVs) who sell their products through AWS Marketplace.
You can subscribe to notifications and create configurations to get notified when a new report or agreement, or a new version of an existing report or agreement becomes available on AWS Artifact.
Incorrect options:
The company should use AWS Audit Manager and leverage its integration with Amazon Simple Notification Service (Amazon SNS) to receive notifications when the compliance reports are available - This option is incorrect because AWS Audit Manager is focused on helping users automate evidence collection for auditing purposes and assess their AWS environment against specific compliance frameworks. It does not offer functionality for accessing or receiving notifications about ISV compliance reports from AWS.
The company should use AWS Trusted Advisor to receive notification alerts for best practices and recommendations to optimize AWS resources - AWS Trusted Advisor is a service that provides guidance to optimize AWS resources by analyzing security, cost, performance, and fault tolerance. However, it does not provide features for managing or receiving notifications about compliance reports, including ISV compliance reports. Therefore, it is not suitable for this requirement.
The company should use AWS Config to enable continuous monitoring of AWS resource configurations to ensure compliance with best practices and internal policies. Leverage the ntegration with Amazon Simple Notification Service (Amazon SNS) to receive notifications when the compliance reports are available - AWS Config is a tool for monitoring and recording AWS resource configurations and evaluating them against desired configurations. While it is useful for maintaining configuration compliance, it does not deal with external compliance reports or provide notification capabilities for ISV compliance documents, making it irrelevant to the company's needs.
References:
https://aws.amazon.com/about-aws/whats-new/2023/08/aws-artifact-email-notifications/
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
