How can I download and share AWS Artifact documents with regulators and auditors, or with other people in my company?

Resolution

Important: Share AWS Artifact compliance documents only with those you trust. AWS Artifact reports have a unique, traceable watermark that's specific to you. Don't email reports or share them online. Instead, use a secure authenticated service with audit capabilities.

You can share AWS Artifact compliance documents (also known as audit artifacts or reports) with regulators, auditors, or others in your company. To share AWS Artifact documents, you can download the reports or grant permissions to AWS Identity and Access Management (IAM) users.

Access available AWS Artifact documents

AWS Artifact provides access to compliance documents when AWS releases them. You can find various compliance reports on the AWS Artifact console.

Complete the following steps:

1. Open the AWS Artifact console.
2. Choose Reports.
3. To find the relevant report, enter a keyword in the search field.

Each report on the AWS Artifact console includes a description to help you select the right report for your compliance requirements. For example, the AWS System and Organization Controls (AWS SOC) Reports include information about release schedules and audit periods.

Common compliance reports include:

• AWS SOC Reports such as AWS SOC Report 1, AWS SOC Report 2, and AWS SOC Report 3
• Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• Payment Card Industry Data Security Standard (PCI DSS)

Download AWS Artifact documents

Sign in to the AWS Artifact console with your AWS account. Then, download the reports in AWS Artifact.

Note: If you don't have an account already, then you can create one. For instructions, see Getting Started with AWS Artifact.

Provide permission to AWS Artifact documents

Create an IAM user. Then, provide IAM permissions to access AWS Artifact documents. For instructions, see Granting user access to AWS Artifact.

Note: It's a best practice to grant the IAM user least privilege access to AWS Artifact documents.

You can restrict access to AWS Artifact document types to specific user accounts. For instructions, see Identity and access management in AWS Artifact.

Keep your AWS Artifact documents secure. Some documents require a nondisclosure agreement (NDA). For more information, see Securing your documents.

Related information

AWS Artifact FAQs