Which AWS service continuously gathers audit evidence and maps AWS usage to the controls of a chosen compliance framework?
Show answer and explanation
Answer: B
Audit Manager maps your AWS usage to the controls in a chosen framework and continuously gathers evidence such as Config snapshots, CloudTrail logs, and manual attestations. It assembles that evidence into assessment reports that auditors can review. This reduces the manual spreadsheet work of recurring compliance audits.
Why the other options are wrong
- A. Config evaluates resource-level rules; it does not build audit-ready evidence packages against a framework.
- C. Security Hub scores security posture but does not produce auditor-facing evidence reports.
- D. Inspector is a vulnerability scanner, not a compliance evidence collection service.