Which AWS service allows users to download security and compliance (CLF-C02)

Correct answer: C. AWS Artifact.
AWS Artifact is a service that provides on-demand access to AWS security and compliance reports, such as SOC 1, SOC 2, and PCI DSS reports, as well as certifications and attestations. These reports provide information about the security and compliance posture of the AWS infrastructure, and can be used to help customers meet their own compliance requirements.

The other options are not correct:
A. Amazon GuardDuty is a threat detection service that monitors AWS accounts for malicious activity, but it does not provide compliance reports.
B. AWS Security Hub is a service that provides a centralized view of security and compliance across AWS accounts, but it does not provide on-demand access to compliance reports.
D. AWS Shield is a service that provides DDoS protection for AWS resources, but it does not provide compliance reports.