The correct choice is AWS Artifact. GreenWave Biotech can use AWS Artifact to access and download AWS compliance reports such as SOC, PCI, and ISO directly from the AWS console without opening a support case.

AWS Artifact is a console based portal that provides on demand access to AWS audit reports and certifications and it allows customers to review and accept compliance agreements. That functionality makes it the appropriate service for retrieving SOC PCI and ISO documents.

AWS Security Hub is not correct because it aggregates security findings and runs posture checks for your resources but it does not host or provide downloadable third party audit reports.

AWS Certificate Manager is not correct because it issues and manages TLS certificates and it does not distribute compliance documentation.

AWS Identity and Access Management is not correct because it controls permissions and access to AWS resources and it does not serve as a repository for audit reports.

Full AWS Practitioner Certification Question