The correct option is Service level agreement. An SLA is the contractual document that sets the baseline obligations a cloud vendor must meet to satisfy the customer and the contract.

Service level agreements typically define availability targets, performance metrics, support response times, security and data handling responsibilities, monitoring and reporting requirements, and remedies such as service credits for failures. Reviewing the SLA lets Maria see the measurable obligations, how they are tested, what exclusions apply, and what remedies or penalties exist if the vendor fails to meet the commitments.

ISO 27001 is an information security management standard and certification. It defines a framework of controls and an audit process, but it does not itself specify a vendor's contractual service level obligations or remedies in a customer contract.

Application programming interface is a technical interface that describes how software components interact with a service. It documents endpoints and behavior for integrations, but it does not contain contractual commitments about uptime, support, or penalties.

Evaluation Assurance Level is part of the Common Criteria and describes the assurance level of a product evaluation. It indicates how rigorously a product was tested and vetted, but it does not lay out the operational or contractual service levels a vendor must meet.

Full AWS Practitioner Certification Question