Module Awso_auditmanager.ValuesSource

Sourceval service : Awso.Service.t
Sourceval apiVersion : string
Sourceval endpointPrefix : string
Sourceval serviceFullName : string
Sourceval signatureVersion : string
Sourceval protocol : string
Sourceval globalEndpoint : string
Sourceval simple_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval composed_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval to_query : ('a -> Awso.Client.Query.value) -> 'a -> Awso.Client.Query.t
Sourceval structure_to_value_aux : ('a * 'b option) list -> f:(('a * 'b) list -> 'c) -> [> `Structure of 'c ]
Sourceval structure_to_value : ('a * 'b option) list -> [> `Structure of ('a * 'b) list ]
Sourceval structure_to_wrapped_value : wrapper:'a -> response:'a -> ('b * 'c option) list -> [> `Structure of ('a * [> `Structure of ('b * 'c) list ]) list ]
Sourcemodule ControlCommentBody : sig ... end
Sourcemodule Timestamp : sig ... end
Sourcemodule Username : sig ... end
Sourcemodule KeywordInputType : sig ... end
Sourcemodule KeywordValue : sig ... end
Sourcemodule ControlComment : sig ... end

A comment that's posted by a user on a control. This includes the author's name, the comment text, and a timestamp.

Sourcemodule NonEmptyString : sig ... end
Sourcemodule SourceDescription : sig ... end
Sourcemodule SourceFrequency : sig ... end
Sourcemodule SourceKeyword : sig ... end

A keyword that relates to the control data source. For manual evidence, this keyword indicates if the manual evidence is a file or text. For automated evidence, this keyword identifies a specific CloudTrail event, Config rule, Security Hub control, or Amazon Web Services API name. To learn more about the supported keywords that you can use when mapping a control data source, see the following pages in the Audit Manager User Guide: Config rules supported by Audit Manager Security Hub controls supported by Audit Manager API calls supported by Audit Manager CloudTrail event names supported by Audit Manager

Sourcemodule SourceName : sig ... end
Sourcemodule SourceSetUpOption : sig ... end
Sourcemodule SourceType : sig ... end
Sourcemodule TroubleshootingText : sig ... end
Sourcemodule UUID : sig ... end
Sourcemodule ControlComments : sig ... end
Sourcemodule ControlDescription : sig ... end
Sourcemodule ControlName : sig ... end
Sourcemodule ControlResponse : sig ... end
Sourcemodule ControlStatus : sig ... end
Sourcemodule EvidenceSources : sig ... end
Sourcemodule Integer : sig ... end
Sourcemodule AssessmentName : sig ... end
Sourcemodule ControlSetId : sig ... end
Sourcemodule CreatedBy : sig ... end
Sourcemodule DelegationComment : sig ... end
Sourcemodule DelegationStatus : sig ... end
Sourcemodule IamArn : sig ... end
Sourcemodule RoleType : sig ... end
Sourcemodule ControlMappingSource : sig ... end

The data source that determines where Audit Manager collects evidence from for the control.

Sourcemodule TagKey : sig ... end
Sourcemodule TagValue : sig ... end
Sourcemodule AssessmentControl : sig ... end

The control entity that represents a standard control or a custom control in an Audit Manager assessment.

Sourcemodule Delegation : sig ... end

The assignment of a control set to a delegate for review.

Sourcemodule Role : sig ... end

The wrapper that contains the Audit Manager role information of the current user. This includes the role type and IAM Amazon Resource Name (ARN).

Sourcemodule AccountId : sig ... end
Sourcemodule AccountName : sig ... end
Sourcemodule EmailAddress : sig ... end
Sourcemodule AWSServiceName : sig ... end
Sourcemodule ActionPlanInstructions : sig ... end
Sourcemodule ActionPlanTitle : sig ... end
Sourcemodule AuditManagerArn : sig ... end
Sourcemodule ControlMappingSources : sig ... end
Sourcemodule ControlSources : sig ... end
Sourcemodule ControlState : sig ... end
Sourcemodule ControlType : sig ... end
Sourcemodule LastUpdatedBy : sig ... end
Sourcemodule TagMap : sig ... end
Sourcemodule TestingInformation : sig ... end
Sourcemodule AssessmentControls : sig ... end
Sourcemodule ControlSetStatus : sig ... end
Sourcemodule Delegations : sig ... end
Sourcemodule Roles : sig ... end
Sourcemodule AWSAccount : sig ... end

The wrapper of Amazon Web Services account details, such as account ID or email address.

Sourcemodule AWSService : sig ... end

An Amazon Web Services service such as Amazon S3 or CloudTrail. For an example of how to find an Amazon Web Services service name and how to define it in your assessment scope, see the following: Finding an Amazon Web Services service name to use in your assessment scope Defining an Amazon Web Services service name in your assessment scope

Sourcemodule Control : sig ... end

A control in Audit Manager.

Sourcemodule GenericArn : sig ... end
Sourcemodule String_ : sig ... end
Sourcemodule AssessmentControlSet : sig ... end

Represents a set of controls in an Audit Manager assessment.

Sourcemodule ComplianceType : sig ... end
Sourcemodule Filename : sig ... end
Sourcemodule S3Url : sig ... end
Sourcemodule AWSAccounts : sig ... end
Sourcemodule AWSServices : sig ... end
Sourcemodule ControlSetName : sig ... end
Sourcemodule Controls : sig ... end

The control entity attributes that uniquely identify an existing control to be added to a framework in Audit Manager.

Sourcemodule NullableInteger : sig ... end
Sourcemodule EvidenceAttributeKey : sig ... end
Sourcemodule EvidenceAttributeValue : sig ... end
Sourcemodule Resource : sig ... end

A system asset that's evaluated in an Audit Manager assessment.

Sourcemodule ValidationExceptionField : sig ... end

Indicates that the request has invalid or missing parameters for the field.

Sourcemodule ExportDestinationType : sig ... end
Sourcemodule DeleteResources : sig ... end
Sourcemodule CloudTrailArn : sig ... end
Sourcemodule ErrorMessage : sig ... end
Sourcemodule AssessmentControlSets : sig ... end
Sourcemodule FrameworkMetadata : sig ... end

The metadata of a framework, such as the name, ID, or description.

Sourcemodule AssessmentDescription : sig ... end

The location where Audit Manager saves assessment reports for the given assessment.

Sourcemodule AssessmentStatus : sig ... end
Sourcemodule Scope : sig ... end

The wrapper that contains the Amazon Web Services accounts that are in scope for the assessment. You no longer need to specify which Amazon Web Services services are in scope when you create or update an assessment. Audit Manager infers the services in scope by examining your assessment controls and their data sources, and then mapping this information to the relevant Amazon Web Services services. If an underlying data source changes for your assessment, we automatically update the services scope as needed to reflect the correct Amazon Web Services services. This ensures that your assessment collects accurate and comprehensive evidence about all of the relevant services in your AWS environment.

Sourcemodule ControlSet : sig ... end

A set of controls in Audit Manager.

Sourcemodule TimestampUUID : sig ... end
Sourcemodule ControlDomainId : sig ... end
Sourcemodule EvidenceInsights : sig ... end

A breakdown of the latest compliance check status for the evidence in your Audit Manager assessments.

Sourcemodule AssessmentReportName : sig ... end
Sourcemodule AssessmentReportStatus : sig ... end
Sourcemodule ControlSetsCount : sig ... end
Sourcemodule ControlsCount : sig ... end
Sourcemodule FrameworkDescription : sig ... end
Sourcemodule FrameworkName : sig ... end
Sourcemodule FrameworkType : sig ... end
Sourcemodule Region : sig ... end
Sourcemodule ShareRequestComment : sig ... end
Sourcemodule ShareRequestStatus : sig ... end
Sourcemodule EventName : sig ... end
Sourcemodule EvidenceAttributes : sig ... end
Sourcemodule Resources : sig ... end
Sourcemodule ActionEnum : sig ... end
Sourcemodule ObjectTypeEnum : sig ... end
Sourcemodule ErrorCode : sig ... end
Sourcemodule ManualEvidence : sig ... end

Evidence that's manually added to a control in Audit Manager. manualEvidence can be one of the following: evidenceFileName, s3ResourcePath, or textResponse.

Sourcemodule CreateDelegationRequest : sig ... end

A collection of attributes that's used to create a delegation for an assessment in Audit Manager.

Sourcemodule ValidationExceptionReason : sig ... end
Sourcemodule Boolean : sig ... end
Sourcemodule DefaultExportDestination : sig ... end

The default s3 bucket where Audit Manager saves the files that you export from evidence finder.

Sourcemodule DeregistrationPolicy : sig ... end

The deregistration policy for the data that's stored in Audit Manager. You can use this attribute to determine how your data is handled when you deregister Audit Manager. By default, Audit Manager retains evidence data for two years from the time of its creation. Other Audit Manager resources (including assessments, custom controls, and custom frameworks) remain in Audit Manager indefinitely, and are available if you re-register Audit Manager in the future. For more information about data retention, see Data Protection in the Audit Manager User Guide. If you choose to delete all data, this action permanently deletes all evidence data in your account within seven days. It also deletes all of the Audit Manager resources that you created, including assessments, custom controls, and custom frameworks. Your data will not be available if you re-register Audit Manager in the future.

Sourcemodule EvidenceFinderEnablement : sig ... end

The settings object that specifies whether evidence finder is enabled. This object also describes the related event data store, and the backfill status for populating the event data store with evidence data.

Sourcemodule KmsKey : sig ... end
Sourcemodule SNSTopic : sig ... end
Sourcemodule AssessmentFramework : sig ... end

The file used to structure and automate Audit Manager assessments for a given compliance standard.

Sourcemodule AssessmentMetadata : sig ... end

The metadata that's associated with the specified assessment.

Sourcemodule ControlSets : sig ... end

A controlSet entity that represents a collection of controls in Audit Manager. This doesn't contain the control set ID.

Sourcemodule Notification : sig ... end

The notification that informs a user of an update in Audit Manager. For example, this includes the notification that's sent when a control set is delegated for review.

Sourcemodule ControlMetadata : sig ... end

The metadata that's associated with the standard control or custom control.

A summary of the latest analytics data for a specific control. This data reflects the total counts for the specified control across all active assessments. Control insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.

Sourcemodule ControlDomainInsights : sig ... end

A summary of the latest analytics data for a specific control domain. Control domain insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.

Sourcemodule AssessmentMetadataItem : sig ... end

A metadata object that's associated with an assessment in Audit Manager.

Sourcemodule AssessmentReportMetadata : sig ... end

The metadata objects that are associated with the specified assessment report.

The metadata that's associated with a standard framework or a custom framework.

Represents a share request for a custom framework in Audit Manager.

A summary of the latest analytics data for a specific control in a specific active assessment. Control insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.

Sourcemodule ServiceMetadata : sig ... end

The metadata that's associated with the Amazon Web Services service.

Sourcemodule AssessmentEvidenceFolder : sig ... end

The folder where Audit Manager stores evidence for an assessment.

Sourcemodule Evidence : sig ... end

A record that contains the information needed to demonstrate compliance with the requirements specified by a control. Examples of evidence include change activity invoked by a user, or a system configuration snapshot.

Sourcemodule DelegationMetadata : sig ... end

The metadata that's associated with the delegation.

Sourcemodule ChangeLog : sig ... end

The record of a change within Audit Manager. For example, this could be the status change of an assessment or the delegation of a control set.

Sourcemodule HyperlinkName : sig ... end

The mapping attributes that determine the evidence source for a given control, along with related parameters and metadata. This doesn't contain mappingID.

A controlSet entity that represents a collection of controls in Audit Manager. This doesn't contain the control set ID.

An error entity for the BatchImportEvidenceToAssessmentControl API. This is used to provide more meaningful errors than a simple string message.

An error entity for assessment report evidence errors. This is used to provide more meaningful errors than a simple string message.

An error entity for the BatchDeleteDelegationByAssessment API. This is used to provide more meaningful errors than a simple string message.

An error entity for the BatchCreateDelegationByAssessment API. This is used to provide more meaningful errors than a simple string message.

Sourcemodule AccessDeniedException : sig ... end

Your account isn't registered with Audit Manager. Check the delegated administrator setup on the Audit Manager settings page, and try again.

Sourcemodule InternalServerException : sig ... end

An internal service error occurred during the processing of your request. Try again later.

Sourcemodule ResourceNotFoundException : sig ... end

The resource that's specified in the request can't be found.

Sourcemodule ValidationErrors : sig ... end
Sourcemodule ValidationException : sig ... end

The request has invalid or missing parameters.

Sourcemodule Settings : sig ... end

The settings object that holds all supported Audit Manager settings.

Sourcemodule SnsArn : sig ... end
Sourcemodule Assessment : sig ... end

An entity that defines the scope of audit evidence collected by Audit Manager. An Audit Manager assessment is an implementation of an Audit Manager framework.

You've reached your account quota for this resource type. To perform the requested action, delete some existing resources or request a quota increase from the Service Quotas console. For a list of Audit Manager service quotas, see Quotas and restrictions for Audit Manager.

Sourcemodule ThrottlingException : sig ... end

The request was denied due to request throttling.

Sourcemodule ShareRequestAction : sig ... end
Sourcemodule ShareRequestType : sig ... end
Sourcemodule Framework : sig ... end

The file that's used to structure and automate Audit Manager assessments for a given compliance standard.

Sourcemodule TagKeyList : sig ... end
Sourcemodule OrganizationId : sig ... end
Sourcemodule AccountStatus : sig ... end
Sourcemodule Notifications : sig ... end
Sourcemodule Token : sig ... end
Sourcemodule MaxResults : sig ... end

Max results in the page.

Sourcemodule Keywords : sig ... end
Sourcemodule DataSourceType : sig ... end
Sourcemodule ControlMetadataList : sig ... end
Sourcemodule ControlCatalogId : sig ... end
Sourcemodule ControlInsightsMetadata : sig ... end
Sourcemodule ControlDomainInsightsList : sig ... end
Sourcemodule ListAssessmentMetadata : sig ... end
Sourcemodule AssessmentReportsMetadata : sig ... end
Sourcemodule FrameworkMetadataList : sig ... end
Sourcemodule SettingAttribute : sig ... end
Sourcemodule ServiceMetadataList : sig ... end
Sourcemodule Insights : sig ... end

A summary of the latest analytics data for all your active assessments. This summary is a snapshot of the data that your active assessments collected on the lastUpdated date. It’s important to understand that the following totals are daily counts based on this date — they aren’t a total sum to date. The Insights data is eventually consistent. This means that, when you read data from Insights, the response might not instantly reflect the results of a recently completed write or update operation. If you repeat your read request after a few hours, the response should return the latest data. If you delete an assessment or change its status to inactive, InsightsByAssessment includes data for that assessment as follows. Inactive assessments - If Audit Manager collected evidence for your assessment before you changed it inactive, that evidence is included in the InsightsByAssessment counts for that day. Deleted assessments - If Audit Manager collected evidence for your assessment before you deleted it, that evidence isn't included in the InsightsByAssessment counts for that day.

Sourcemodule InsightsByAssessment : sig ... end

A summary of the latest analytics data for a specific active assessment. This summary is a snapshot of the data that was collected on the lastUpdated date. It’s important to understand that the totals in InsightsByAssessment are daily counts based on this date — they aren’t a total sum to date. The InsightsByAssessment data is eventually consistent. This means that when you read data from InsightsByAssessment, the response might not instantly reflect the results of a recently completed write or update operation. If you repeat your read request after a few hours, the response returns the latest data. If you delete an assessment or change its status to inactive, InsightsByAssessment includes data for that assessment as follows. Inactive assessments - If Audit Manager collected evidence for your assessment before you changed it inactive, that evidence is included in the InsightsByAssessment counts for that day. Deleted assessments - If Audit Manager collected evidence for your assessment before you deleted it, that evidence isn't included in the InsightsByAssessment counts for that day.

Sourcemodule AssessmentEvidenceFolders : sig ... end
Sourcemodule EvidenceList : sig ... end
Sourcemodule DelegationMetadataList : sig ... end
Sourcemodule ChangeLogs : sig ... end
Sourcemodule URL : sig ... end

Short for uniform resource locator. A URL is used as a unique identifier to locate a resource on the internet.

Sourcemodule AssessmentReport : sig ... end

A finalized document that's generated from an Audit Manager assessment. These reports summarize the relevant evidence that was collected for your audit, and link to the relevant evidence folders. These evidence folders are named and organized according to the controls that are specified in your assessment.

Sourcemodule QueryStatement : sig ... end
Sourcemodule ManualEvidenceList : sig ... end
Sourcemodule EvidenceIds : sig ... end
Sourcemodule DelegationIds : sig ... end
Sourcemodule CreateDelegationRequests : sig ... end

Validates the integrity of an assessment report in Audit Manager.

Validates the integrity of an assessment report in Audit Manager.

Sourcemodule UpdateSettingsResponse : sig ... end

Updates Audit Manager settings for the current account.

Sourcemodule UpdateSettingsRequest : sig ... end

Updates Audit Manager settings for the current account.

Sourcemodule UpdateControlResponse : sig ... end

Updates a custom control in Audit Manager.

Sourcemodule UpdateControlRequest : sig ... end

Updates a custom control in Audit Manager.

Updates the status of an assessment in Audit Manager.

Updates the status of an assessment in Audit Manager.

Sourcemodule UpdateAssessmentResponse : sig ... end

Edits an Audit Manager assessment.

Sourcemodule UpdateAssessmentRequest : sig ... end

Edits an Audit Manager assessment.

Updates a share request for a custom framework in Audit Manager.

Updates a share request for a custom framework in Audit Manager.

Updates a custom framework in Audit Manager.

Updates a custom framework in Audit Manager.

Updates the status of a control set in an Audit Manager assessment.

Updates the status of a control set in an Audit Manager assessment.

Updates a control within an assessment in Audit Manager.

Updates a control within an assessment in Audit Manager.

Sourcemodule UntagResourceResponse : sig ... end

Removes a tag from a resource in Audit Manager.

Sourcemodule UntagResourceRequest : sig ... end

Removes a tag from a resource in Audit Manager.

Sourcemodule TagResourceResponse : sig ... end

Tags the specified resource in Audit Manager.

Sourcemodule TagResourceRequest : sig ... end

Tags the specified resource in Audit Manager.

Creates a share request for a custom framework in Audit Manager. The share request specifies a recipient and notifies them that a custom framework is available. Recipients have 120 days to accept or decline the request. If no action is taken, the share request expires. When you create a share request, Audit Manager stores a snapshot of your custom framework in the US East (N. Virginia) Amazon Web Services Region. Audit Manager also stores a backup of the same snapshot in the US West (Oregon) Amazon Web Services Region. Audit Manager deletes the snapshot and the backup snapshot when one of the following events occurs: The sender revokes the share request. The recipient declines the share request. The recipient encounters an error and doesn't successfully accept the share request. The share request expires before the recipient responds to the request. When a sender resends a share request, the snapshot is replaced with an updated version that corresponds with the latest version of the custom framework. When a recipient accepts a share request, the snapshot is replicated into their Amazon Web Services account under the Amazon Web Services Region that was specified in the share request. When you invoke the StartAssessmentFrameworkShare API, you are about to share a custom framework with another Amazon Web Services account. You may not share a custom framework that is derived from a standard framework if the standard framework is designated as not eligible for sharing by Amazon Web Services, unless you have obtained permission to do so from the owner of the standard framework. To learn more about which standard frameworks are eligible for sharing, see Framework sharing eligibility in the Audit Manager User Guide.

Creates a share request for a custom framework in Audit Manager. The share request specifies a recipient and notifies them that a custom framework is available. Recipients have 120 days to accept or decline the request. If no action is taken, the share request expires. When you create a share request, Audit Manager stores a snapshot of your custom framework in the US East (N. Virginia) Amazon Web Services Region. Audit Manager also stores a backup of the same snapshot in the US West (Oregon) Amazon Web Services Region. Audit Manager deletes the snapshot and the backup snapshot when one of the following events occurs: The sender revokes the share request. The recipient declines the share request. The recipient encounters an error and doesn't successfully accept the share request. The share request expires before the recipient responds to the request. When a sender resends a share request, the snapshot is replaced with an updated version that corresponds with the latest version of the custom framework. When a recipient accepts a share request, the snapshot is replicated into their Amazon Web Services account under the Amazon Web Services Region that was specified in the share request. When you invoke the StartAssessmentFrameworkShare API, you are about to share a custom framework with another Amazon Web Services account. You may not share a custom framework that is derived from a standard framework if the standard framework is designated as not eligible for sharing by Amazon Web Services, unless you have obtained permission to do so from the owner of the standard framework. To learn more about which standard frameworks are eligible for sharing, see Framework sharing eligibility in the Audit Manager User Guide.

Enables an Amazon Web Services account within the organization as the delegated administrator for Audit Manager.

Enables an Amazon Web Services account within the organization as the delegated administrator for Audit Manager.

Sourcemodule RegisterAccountResponse : sig ... end

Enables Audit Manager for the specified Amazon Web Services account.

Sourcemodule RegisterAccountRequest : sig ... end

Enables Audit Manager for the specified Amazon Web Services account.

Returns a list of tags for the specified resource in Audit Manager.

Returns a list of tags for the specified resource in Audit Manager.

Sourcemodule ListNotificationsResponse : sig ... end

Returns a list of all Audit Manager notifications.

Sourcemodule ListNotificationsRequest : sig ... end

Returns a list of all Audit Manager notifications.

Returns a list of keywords that are pre-mapped to the specified control data source.

Returns a list of keywords that are pre-mapped to the specified control data source.

Sourcemodule ListControlsResponse : sig ... end

Returns a list of controls from Audit Manager.

Sourcemodule ListControlsRequest : sig ... end

Returns a list of controls from Audit Manager.

Lists the latest analytics data for controls within a specific control domain across all active assessments. Control insights are listed only if the control belongs to the control domain that was specified and the control collected evidence on the lastUpdated date of controlInsightsMetadata. If neither of these conditions are met, no data is listed for that control.

Lists the latest analytics data for controls within a specific control domain across all active assessments. Control insights are listed only if the control belongs to the control domain that was specified and the control collected evidence on the lastUpdated date of controlInsightsMetadata. If neither of these conditions are met, no data is listed for that control.

Lists the latest analytics data for control domains across all of your active assessments. Audit Manager supports the control domains that are provided by Amazon Web Services Control Catalog. For information about how to find a list of available control domains, see ListDomains in the Amazon Web Services Control Catalog API Reference. A control domain is listed only if at least one of the controls within that domain collected evidence on the lastUpdated date of controlDomainInsights. If this condition isn’t met, no data is listed for that control domain.

Lists the latest analytics data for control domains across all of your active assessments. Audit Manager supports the control domains that are provided by Amazon Web Services Control Catalog. For information about how to find a list of available control domains, see ListDomains in the Amazon Web Services Control Catalog API Reference. A control domain is listed only if at least one of the controls within that domain collected evidence on the lastUpdated date of controlDomainInsights. If this condition isn’t met, no data is listed for that control domain.

Lists analytics data for control domains within a specified active assessment. Audit Manager supports the control domains that are provided by Amazon Web Services Control Catalog. For information about how to find a list of available control domains, see ListDomains in the Amazon Web Services Control Catalog API Reference. A control domain is listed only if at least one of the controls within that domain collected evidence on the lastUpdated date of controlDomainInsights. If this condition isn’t met, no data is listed for that domain.

Lists analytics data for control domains within a specified active assessment. Audit Manager supports the control domains that are provided by Amazon Web Services Control Catalog. For information about how to find a list of available control domains, see ListDomains in the Amazon Web Services Control Catalog API Reference. A control domain is listed only if at least one of the controls within that domain collected evidence on the lastUpdated date of controlDomainInsights. If this condition isn’t met, no data is listed for that domain.

Sourcemodule ListAssessmentsResponse : sig ... end

Returns a list of current and past assessments from Audit Manager.

Sourcemodule ListAssessmentsRequest : sig ... end

Returns a list of current and past assessments from Audit Manager.

Returns a list of assessment reports created in Audit Manager.

Returns a list of assessment reports created in Audit Manager.

Returns a list of the frameworks that are available in the Audit Manager framework library.

Returns a list of the frameworks that are available in the Audit Manager framework library.

Returns a list of sent or received share requests for custom frameworks in Audit Manager.

Returns a list of sent or received share requests for custom frameworks in Audit Manager.

Lists the latest analytics data for controls within a specific control domain and a specific active assessment. Control insights are listed only if the control belongs to the control domain and assessment that was specified. Moreover, the control must have collected evidence on the lastUpdated date of controlInsightsByAssessment. If neither of these conditions are met, no data is listed for that control.

Lists the latest analytics data for controls within a specific control domain and a specific active assessment. Control insights are listed only if the control belongs to the control domain and assessment that was specified. Moreover, the control must have collected evidence on the lastUpdated date of controlInsightsByAssessment. If neither of these conditions are met, no data is listed for that control.

Sourcemodule GetSettingsResponse : sig ... end

Gets the settings for a specified Amazon Web Services account.

Sourcemodule GetSettingsRequest : sig ... end

Gets the settings for a specified Amazon Web Services account.

Gets a list of the Amazon Web Services services from which Audit Manager can collect evidence. Audit Manager defines which Amazon Web Services services are in scope for an assessment. Audit Manager infers this scope by examining the assessment’s controls and their data sources, and then mapping this information to one or more of the corresponding Amazon Web Services services that are in this list. For information about why it's no longer possible to specify services in scope manually, see I can't edit the services in scope for my assessment in the Troubleshooting section of the Audit Manager user guide.

Sourcemodule GetServicesInScopeRequest : sig ... end

Gets a list of the Amazon Web Services services from which Audit Manager can collect evidence. Audit Manager defines which Amazon Web Services services are in scope for an assessment. Audit Manager infers this scope by examining the assessment’s controls and their data sources, and then mapping this information to one or more of the corresponding Amazon Web Services services that are in this list. For information about why it's no longer possible to specify services in scope manually, see I can't edit the services in scope for my assessment in the Troubleshooting section of the Audit Manager user guide.

Gets the name of the delegated Amazon Web Services administrator account for a specified organization.

Gets the name of the delegated Amazon Web Services administrator account for a specified organization.

Sourcemodule GetInsightsResponse : sig ... end

Gets the latest analytics data for all your current active assessments.

Sourcemodule GetInsightsRequest : sig ... end

Gets the latest analytics data for all your current active assessments.

Gets the latest analytics data for a specific active assessment.

Gets the latest analytics data for a specific active assessment.

Sourcemodule GetEvidenceResponse : sig ... end

Gets information about a specified evidence item.

Sourcemodule GetEvidenceRequest : sig ... end

Gets information about a specified evidence item.

Gets the evidence folders from a specified assessment in Audit Manager.

Gets the evidence folders from a specified assessment in Audit Manager.

Gets a list of evidence folders that are associated with a specified control in an Audit Manager assessment.

Gets a list of evidence folders that are associated with a specified control in an Audit Manager assessment.

Sourcemodule GetEvidenceFolderResponse : sig ... end

Gets an evidence folder from a specified assessment in Audit Manager.

Sourcemodule GetEvidenceFolderRequest : sig ... end

Gets an evidence folder from a specified assessment in Audit Manager.

Creates a presigned Amazon S3 URL that can be used to upload a file as manual evidence. For instructions on how to use this operation, see Upload a file from your browser in the Audit Manager User Guide. The following restrictions apply to this operation: Maximum size of an individual evidence file: 100 MB Number of daily manual evidence uploads per control: 100 Supported file formats: See Supported file types for manual evidence in the Audit Manager User Guide For more information about Audit Manager service restrictions, see Quotas and restrictions for Audit Manager.

Creates a presigned Amazon S3 URL that can be used to upload a file as manual evidence. For instructions on how to use this operation, see Upload a file from your browser in the Audit Manager User Guide. The following restrictions apply to this operation: Maximum size of an individual evidence file: 100 MB Number of daily manual evidence uploads per control: 100 Supported file formats: See Supported file types for manual evidence in the Audit Manager User Guide For more information about Audit Manager service restrictions, see Quotas and restrictions for Audit Manager.

Gets all evidence from a specified evidence folder in Audit Manager.

Gets all evidence from a specified evidence folder in Audit Manager.

Sourcemodule GetDelegationsResponse : sig ... end

Gets a list of delegations from an audit owner to a delegate.

Sourcemodule GetDelegationsRequest : sig ... end

Gets a list of delegations from an audit owner to a delegate.

Sourcemodule GetControlResponse : sig ... end

Gets information about a specified control.

Sourcemodule GetControlRequest : sig ... end

Gets information about a specified control.

Sourcemodule GetChangeLogsResponse : sig ... end

Gets a list of changelogs from Audit Manager.

Sourcemodule GetChangeLogsRequest : sig ... end

Gets a list of changelogs from Audit Manager.

Sourcemodule GetAssessmentResponse : sig ... end

Gets information about a specified assessment.

Sourcemodule GetAssessmentRequest : sig ... end

Gets information about a specified assessment.

Gets the URL of an assessment report in Audit Manager.

Gets the URL of an assessment report in Audit Manager.

Gets information about a specified framework.

Gets information about a specified framework.

Sourcemodule GetAccountStatusResponse : sig ... end

Gets the registration status of an account in Audit Manager.

Sourcemodule GetAccountStatusRequest : sig ... end

Gets the registration status of an account in Audit Manager.

Disassociates an evidence folder from the specified assessment report in Audit Manager.

Disassociates an evidence folder from the specified assessment report in Audit Manager.

Removes the specified Amazon Web Services account as a delegated administrator for Audit Manager. When you remove a delegated administrator from your Audit Manager settings, you continue to have access to the evidence that you previously collected under that account. This is also the case when you deregister a delegated administrator from Organizations. However, Audit Manager stops collecting and attaching evidence to that delegated administrator account moving forward. Keep in mind the following cleanup task if you use evidence finder: Before you use your management account to remove a delegated administrator, make sure that the current delegated administrator account signs in to Audit Manager and disables evidence finder first. Disabling evidence finder automatically deletes the event data store that was created in their account when they enabled evidence finder. If this task isn’t completed, the event data store remains in their account. In this case, we recommend that the original delegated administrator goes to CloudTrail Lake and manually deletes the event data store. This cleanup task is necessary to ensure that you don't end up with multiple event data stores. Audit Manager ignores an unused event data store after you remove or change a delegated administrator account. However, the unused event data store continues to incur storage costs from CloudTrail Lake if you don't delete it. When you deregister a delegated administrator account for Audit Manager, the data for that account isn’t deleted. If you want to delete resource data for a delegated administrator account, you must perform that task separately before you deregister the account. Either, you can do this in the Audit Manager console. Or, you can use one of the delete API operations that are provided by Audit Manager. To delete your Audit Manager resource data, see the following instructions: DeleteAssessment (see also: Deleting an assessment in the Audit Manager User Guide) DeleteAssessmentFramework (see also: Deleting a custom framework in the Audit Manager User Guide) DeleteAssessmentFrameworkShare (see also: Deleting a share request in the Audit Manager User Guide) DeleteAssessmentReport (see also: Deleting an assessment report in the Audit Manager User Guide) DeleteControl (see also: Deleting a custom control in the Audit Manager User Guide) At this time, Audit Manager doesn't provide an option to delete evidence for a specific delegated administrator. Instead, when your management account deregisters Audit Manager, we perform a cleanup for the current delegated administrator account at the time of deregistration.

Removes the specified Amazon Web Services account as a delegated administrator for Audit Manager. When you remove a delegated administrator from your Audit Manager settings, you continue to have access to the evidence that you previously collected under that account. This is also the case when you deregister a delegated administrator from Organizations. However, Audit Manager stops collecting and attaching evidence to that delegated administrator account moving forward. Keep in mind the following cleanup task if you use evidence finder: Before you use your management account to remove a delegated administrator, make sure that the current delegated administrator account signs in to Audit Manager and disables evidence finder first. Disabling evidence finder automatically deletes the event data store that was created in their account when they enabled evidence finder. If this task isn’t completed, the event data store remains in their account. In this case, we recommend that the original delegated administrator goes to CloudTrail Lake and manually deletes the event data store. This cleanup task is necessary to ensure that you don't end up with multiple event data stores. Audit Manager ignores an unused event data store after you remove or change a delegated administrator account. However, the unused event data store continues to incur storage costs from CloudTrail Lake if you don't delete it. When you deregister a delegated administrator account for Audit Manager, the data for that account isn’t deleted. If you want to delete resource data for a delegated administrator account, you must perform that task separately before you deregister the account. Either, you can do this in the Audit Manager console. Or, you can use one of the delete API operations that are provided by Audit Manager. To delete your Audit Manager resource data, see the following instructions: DeleteAssessment (see also: Deleting an assessment in the Audit Manager User Guide) DeleteAssessmentFramework (see also: Deleting a custom framework in the Audit Manager User Guide) DeleteAssessmentFrameworkShare (see also: Deleting a share request in the Audit Manager User Guide) DeleteAssessmentReport (see also: Deleting an assessment report in the Audit Manager User Guide) DeleteControl (see also: Deleting a custom control in the Audit Manager User Guide) At this time, Audit Manager doesn't provide an option to delete evidence for a specific delegated administrator. Instead, when your management account deregisters Audit Manager, we perform a cleanup for the current delegated administrator account at the time of deregistration.

Sourcemodule DeregisterAccountResponse : sig ... end

Deregisters an account in Audit Manager. Before you deregister, you can use the UpdateSettings API operation to set your preferred data retention policy. By default, Audit Manager retains your data. If you want to delete your data, you can use the DeregistrationPolicy attribute to request the deletion of your data. For more information about data retention, see Data Protection in the Audit Manager User Guide.

Sourcemodule DeregisterAccountRequest : sig ... end

Deregisters an account in Audit Manager. Before you deregister, you can use the UpdateSettings API operation to set your preferred data retention policy. By default, Audit Manager retains your data. If you want to delete your data, you can use the DeregistrationPolicy attribute to request the deletion of your data. For more information about data retention, see Data Protection in the Audit Manager User Guide.

Sourcemodule DeleteControlResponse : sig ... end

Deletes a custom control in Audit Manager. When you invoke this operation, the custom control is deleted from any frameworks or assessments that it’s currently part of. As a result, Audit Manager will stop collecting evidence for that custom control in all of your assessments. This includes assessments that you previously created before you deleted the custom control.

Sourcemodule DeleteControlRequest : sig ... end

Deletes a custom control in Audit Manager. When you invoke this operation, the custom control is deleted from any frameworks or assessments that it’s currently part of. As a result, Audit Manager will stop collecting evidence for that custom control in all of your assessments. This includes assessments that you previously created before you deleted the custom control.

Sourcemodule DeleteAssessmentResponse : sig ... end

Deletes an assessment in Audit Manager.

Sourcemodule DeleteAssessmentRequest : sig ... end

Deletes an assessment in Audit Manager.

Deletes an assessment report in Audit Manager. When you run the DeleteAssessmentReport operation, Audit Manager attempts to delete the following data: The specified assessment report that’s stored in your S3 bucket The associated metadata that’s stored in Audit Manager If Audit Manager can’t access the assessment report in your S3 bucket, the report isn’t deleted. In this event, the DeleteAssessmentReport operation doesn’t fail. Instead, it proceeds to delete the associated metadata only. You must then delete the assessment report from the S3 bucket yourself. This scenario happens when Audit Manager receives a 403 (Forbidden) or 404 (Not Found) error from Amazon S3. To avoid this, make sure that your S3 bucket is available, and that you configured the correct permissions for Audit Manager to delete resources in your S3 bucket. For an example permissions policy that you can use, see Assessment report destination permissions in the Audit Manager User Guide. For information about the issues that could cause a 403 (Forbidden) or 404 (Not Found) error from Amazon S3, see List of Error Codes in the Amazon Simple Storage Service API Reference.

Deletes an assessment report in Audit Manager. When you run the DeleteAssessmentReport operation, Audit Manager attempts to delete the following data: The specified assessment report that’s stored in your S3 bucket The associated metadata that’s stored in Audit Manager If Audit Manager can’t access the assessment report in your S3 bucket, the report isn’t deleted. In this event, the DeleteAssessmentReport operation doesn’t fail. Instead, it proceeds to delete the associated metadata only. You must then delete the assessment report from the S3 bucket yourself. This scenario happens when Audit Manager receives a 403 (Forbidden) or 404 (Not Found) error from Amazon S3. To avoid this, make sure that your S3 bucket is available, and that you configured the correct permissions for Audit Manager to delete resources in your S3 bucket. For an example permissions policy that you can use, see Assessment report destination permissions in the Audit Manager User Guide. For information about the issues that could cause a 403 (Forbidden) or 404 (Not Found) error from Amazon S3, see List of Error Codes in the Amazon Simple Storage Service API Reference.

Deletes a share request for a custom framework in Audit Manager.

Deletes a share request for a custom framework in Audit Manager.

Deletes a custom framework in Audit Manager.

Deletes a custom framework in Audit Manager.

Sourcemodule CreateControlResponse : sig ... end

Creates a new custom control in Audit Manager.

Sourcemodule CreateControlRequest : sig ... end

Creates a new custom control in Audit Manager.

Sourcemodule CreateAssessmentResponse : sig ... end

Creates an assessment in Audit Manager.

Sourcemodule CreateAssessmentRequest : sig ... end

Creates an assessment in Audit Manager.

Creates an assessment report for the specified assessment.

Creates an assessment report for the specified assessment.

Creates a custom framework in Audit Manager.

Creates a custom framework in Audit Manager.

Adds one or more pieces of evidence to a control in an Audit Manager assessment. You can import manual evidence from any S3 bucket by specifying the S3 URI of the object. You can also upload a file from your browser, or enter plain text in response to a risk assessment question. The following restrictions apply to this action: manualEvidence can be only one of the following: evidenceFileName, s3ResourcePath, or textResponse Maximum size of an individual evidence file: 100 MB Number of daily manual evidence uploads per control: 100 Supported file formats: See Supported file types for manual evidence in the Audit Manager User Guide For more information about Audit Manager service restrictions, see Quotas and restrictions for Audit Manager.

Adds one or more pieces of evidence to a control in an Audit Manager assessment. You can import manual evidence from any S3 bucket by specifying the S3 URI of the object. You can also upload a file from your browser, or enter plain text in response to a risk assessment question. The following restrictions apply to this action: manualEvidence can be only one of the following: evidenceFileName, s3ResourcePath, or textResponse Maximum size of an individual evidence file: 100 MB Number of daily manual evidence uploads per control: 100 Supported file formats: See Supported file types for manual evidence in the Audit Manager User Guide For more information about Audit Manager service restrictions, see Quotas and restrictions for Audit Manager.

Disassociates a list of evidence from an assessment report in Audit Manager.

Disassociates a list of evidence from an assessment report in Audit Manager.

Deletes a batch of delegations for an assessment in Audit Manager.

Deletes a batch of delegations for an assessment in Audit Manager.

Creates a batch of delegations for an assessment in Audit Manager.

Creates a batch of delegations for an assessment in Audit Manager.

Associates a list of evidence to an assessment report in an Audit Manager assessment.

Associates a list of evidence to an assessment report in an Audit Manager assessment.

Associates an evidence folder to an assessment report in an Audit Manager assessment.

Associates an evidence folder to an assessment report in an Audit Manager assessment.