AWS Artifact is the correct option because it provides on demand access to AWS compliance reports and certifications that auditors can download directly.

AWS Artifact hosts AWS provided compliance documents including PCI DSS and SOC reports and it is designed for customers and auditors to retrieve formal evidence of AWS compliance. This makes AWS Artifact the proper source when an external audit requires AWS generated PCI documentation.

AWS Audit Manager is not correct because it helps you automate evidence collection and map controls for your own assessments and audits rather than serving as the repository for AWS issued compliance reports.

AWS Trusted Advisor is not correct because it provides best practice checks and operational recommendations for cost security and performance and it does not provide formal compliance artifacts for download.

AWS Cost & Usage Report (AWS CUR) is not correct because it delivers billing and usage data for cost analysis and forecasting and it is unrelated to obtaining PCI or other compliance reports.

Full AWS Practitioner Certification Question