AWS Certified AI Practitioner AIF-C01 Practice Question

The System and Organization Controls (SOC) 2 report is designed around the AICPA Trust Services Criteria, which cover security, availability, processing integrity, confidentiality, and privacy. Customers can request AWS's SOC 2 report (available through AWS Artifact) to verify that the cloud provider's internal controls for these areas have been independently audited. ISO/IEC 27018 focuses specifically on protection of personally identifiable information in the cloud, PCI DSS attestation targets payment card data security, and the HIPAA Business Associate Addendum addresses healthcare data obligations; none of these frameworks map directly to all five Trust Services Criteria.