A company operates in a hybrid cloud environment with strict compliance requirements. The company needs a report that includes evidence from on-premises workloads together with evidence from AWS resources. A security engineer must implement a solution to collect, review, and manage this evidence to demonstrate compliance with company policy. Which solution will meet these requirements?

AWS Audit Manager is designed to continuously audit AWS usage and collect evidence for compliance. It supports prebuilt and custom frameworks, allowing the company to align with specific compliance requirements. A key feature for hybrid environments is the ability to upload manual evidence, which directly addresses the need to include data from on-premises workloads. Audit Manager then automatically collects evidence from AWS resources. Finally, it can generate a comprehensive assessment report combining both AWS and on-premises evidence, fulfilling the reporting requirement. The other options are less suitable: AWS Config and CloudWatch agent primarily focus on AWS resource configuration and monitoring, not comprehensive evidence collection and reporting for hybrid compliance. While Config can identify non-compliance, it's not designed to integrate manual on-premises evidence into a unified compliance report like Audit Manager. AWS Security Hub aggregates security findings but doesn't offer the same structured evidence collection and reporting capabilities for compliance frameworks, especially for integrating manual on-premises evidence into a formal assessment report. CloudWatch dashboards are for monitoring and operational insights, not for generating compliance assessment reports that combine automated and manual evidence across hybrid environments.