Q. The reviewer wants a control-mapped report and a statement of what the model is approved for. Two artifacts?
A. AWS Audit Manager’s generative-AI best-practices framework maps collected evidence to controls and produces the assessment report; a SageMaker Model Card documents intended use, risk rating, and evaluation results.
Why? Raw logs are not an audit; the framework makes the report, and the Model Card is the governance document.