A company is requesting Payment Card Industry (PCI) reports that validate the operating effectiveness of AWS security controls. How should the company obtain these reports?

While AWS Support can assist with various issues, it is not the primary mechanism for obtaining official compliance reports like PCI documents; those are specifically hosted on AWS Artifact.

AWS Artifact is a self-service portal for on-demand access to AWS's compliance reports and select online agreements. This is where customers can find security and compliance reports, including PCI reports, to understand the operating effectiveness of AWS security controls.

AWS Security Hub aggregates security findings from various AWS services and partner products but does not provide official AWS compliance reports for download.

An AWS technical account manager (TAM) can provide guidance, but they do not directly provide compliance reports for download; these reports are accessed via AWS Artifact.