ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

AWS Audit Manager is designed specifically to simplify compliance reporting. It continuously collects CloudTrail events, configuration snapshots, and other evidence from AWS services, correlates the data with the chosen compliance framework-such as HIPAA-and produces assessment reports that can be exported for auditors. AWS Artifact provides third-party attestations about AWS itself but does not gather evidence from the customer's environment. CloudTrail supplies raw activity logs but leaves collection, control mapping, and report generation to the customer. AWS Config conformance packs evaluate resource configurations against rules, yet they neither gather operational evidence nor create formatted audit reports. Therefore, Audit Manager is the only option that delivers automated evidence collection and framework-aligned reporting with minimal administrative overhead.