How can I download and share AWS Artifact documents with regulators and auditors, or with other people in my company?

Short description

You can share AWS Artifact compliance documents (also known as audit artifacts or reports) with regulators, auditors, or with others in your company. You can use these documents as evidence of AWS security controls. You can also download AWS Artifact documents with the AWS Management Console.

Resolution

To share AWS Artifact documents, you can either download the reports or provide permissions to the reports.

Important: Share AWS Artifact documents only with those you trust. AWS Artifact reports have a unique, traceable watermark that's specific to you. Don't email reports or share them online. Instead, use a secure authenticated service with audit capabilities, such as Amazon WorkDocs, to share reports.

Download AWS Artifact documents

To download AWS Artifact documents, sign in to the AWS Artifact console with your AWS account. Then, follow the instructions for Downloading reports in AWS Artifact.

Note: If you don't have an AWS account already, you must create one. For instructions, see Getting started with AWS Artifact.

Provide permission to AWS Artifact documents

Create an AWS Identity and Access Management (IAM) user. Then, provide IAM permissions to access AWS Artifact documents. For instructions, see Setup user access to AWS Artifact.

Note: It's a best practice to grant the IAM user least privilege access to AWS Artifact documents.

You can restrict access to AWS Artifact document types to specific user accounts. For instructions, see Identity and access management in AWS Artifact.

AWS Artifact documents must be kept secure and might require a nondisclosure agreement (NDA). For more information, see Securing Your documents.

Related information

AWS Artifact FAQs