A compliance officer at a financial services company needs to download Microsoft's independent audit reports, such as SOC 2 and ISO 27001 certifications, to demonstrate that Azure meets regulatory requirements during an external audit. Which Azure resource should the officer use?