AWS Audit Manager mindmap

AWS Audit Manager

Continuously audit your AWS usage to assess risk and compliance with regulations and industry standards

• Frameworks: Collections of controls mapped to a standard or regulation
  • Prebuilt frameworks: For example CIS AWS Foundations Benchmark, GDPR, PCI DSS, HIPAA, SOC 2 and NIST SP 800-53
  • Custom frameworks: Your own, or a customized copy of a prebuilt one
  • Framework sharing: Share custom frameworks with other accounts
• Controls: The requirement and where its evidence comes from
  • Standard controls: Predefined by AWS
  • Custom controls: Your own evidence sources and testing information
• Assessments: Collect evidence for one framework, in the accounts and services you choose
  • Delegation: Send a control set to a subject matter expert for review
  • Evidence folders: Where collected evidence is stored for browsing
• Automated evidence
  • Compliance checks: Results from AWS Config rules and Security Hub controls
  • User activity: CloudTrail events, such as changes to settings
  • Configuration data: Snapshots from AWS API calls
• Manual evidence: Upload files or enter text for controls that need people, such as policies and procedures
• Evidence finder: Search evidence quickly with CloudTrail Lake
• Assessment reports: Audit-ready reports with the evidence you choose
• Multi-account: Use Audit Manager across the accounts of an organization