I requested access to an AWS Artifact Service Organization Control (SOC) report, but didn't receive a response. Or, I received a message similar to the following: "You need additional approval from AWS to access this report."
Resolution
Configure IAM user permissions
By default, only the AWS account root user and AWS Identity and Access Management (IAM) users with administrator permissions can download available audit artifacts or reports to their account.
To grant IAM users without administrator permissions access to AWS Artifact reports, attach an IAM policy with the required permissions. For example policies, see Example IAM policies for AWS Artifact in commercial AWS Regions.
Important:
- If you turned on multi-factor authentication (MFA) for an IAM user with an enforce MFA policy attached, then you must use MFA to sign in.
- For AWS Organizations accounts, confirm that service control policies (SCPs) don't deny access to AWS Artifact reports.
- If you can't download a report or you receive a permissions error, then see the Troubleshooting section in AWS Artifact FAQs.
Download a SOC report
Complete the following steps:
- Open the AWS Artifact console.
- Choose View reports.
- On the Reports page, choose the AWS reports tab.
- (Optional) To search for a specific report, enter a keyword in the search field, or filter by Title, Category, or Series.
- (Optional) To download a previous version of a report, choose the report title to open the details page, then locate the Previous versions section. Then choose Download for the desired version.
- Select the report and choose Download report.
- Select I have read and agree to the terms, then choose Accept terms and download report.
- Open the downloaded file in a PDF viewer.
Note: Each downloaded report generates specifically for you and contains a unique watermark. Share reports only with trusted parties within your company, regulators, or auditors. Don't email reports as attachments or share them publicly.
Open the SOC report content in the downloaded PDF
AWS Artifact report downloads contain a copy of the signed terms and conditions along with the compliance document embedded as a PDF attachment. To access the SOC report content, take the following actions:
For Adobe Acrobat Reader, choose the paperclip icon in the PDF to view attachments. To download the latest Adobe Acrobat Reader version, see Download Adobe Acrobat Reader on the Adobe website.
For Firefox, open the PDF in the Firefox built-in viewer, then choose Toggle Sidebar. Then, choose Show Attachments.
For more information, see Viewing attachments in PDF documents.
If you still can't access the report, see the Troubleshooting section in AWS Artifact FAQs.
Related information
Downloading reports in AWS Artifact
Identity and access management in AWS Artifact
How do I download and share AWS Artifact documents with regulators and auditors, or with other people in my company?