AWS Artifact is the correct option for obtaining AWS SOC and PCI compliance reports for a vendor risk assessment.

AWS Artifact is a self service portal that provides on demand access to AWS security and compliance reports and certain agreements so teams can download official SOC and PCI documentation directly from their account without opening support tickets or emailing AWS personnel. The portal is intended to supply the official vendor documents auditors expect and it centralizes report access for accounts and organizations.

Create a case with AWS Support is unnecessary because standard compliance reports are distributed through the Artifact portal and do not require a support case to obtain.

AWS Secrets Manager is unrelated because it is a service for storing and rotating credentials and it does not host or distribute compliance reports.

Contact the AWS Compliance team is not required for routine downloads because the reports are already available to account holders in Artifact and contacting a team is usually only needed for unusual or account specific questions.

Full AWS Practitioner Certification Question