Adds one or more pieces of evidence to a control in an Audit Manager assessment.

You can import manual evidence from any S3 bucket by specifying the S3 URI of the object. You can also upload a file from your browser, or enter plain text in response to a risk assessment question.

The following restrictions apply to this action:

• manualEvidence can be only one of the following: evidenceFileName, s3ResourcePath, or textResponse

• Maximum size of an individual evidence file: 100 MB

• Number of daily manual evidence uploads per control: 100

• Supported file formats: See Supported file types for manual evidence: https://docs.aws.amazon.com/audit-manager/latest/userguide/upload-evidence.html#supported-manual-evidence-files in the Audit Manager User Guide

Deletes an assessment report in Audit Manager.

When you run the DeleteAssessmentReport operation, Audit Manager attempts to delete the following data:

1. The specified assessment report that’s stored in your S3 bucket

2. The associated metadata that’s stored in Audit Manager

If Audit Manager can’t access the assessment report in your S3 bucket, the report isn’t deleted. In this event, the DeleteAssessmentReport operation doesn’t fail. Instead, it proceeds to delete the associated metadata only. You must then delete the assessment report from the S3 bucket yourself.

Deletes a custom control in Audit Manager.

Deregisters an account in Audit Manager.

Before you deregister, you can use the UpdateSettings: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_UpdateSettings.html API operation to set your preferred data retention policy. By default, Audit Manager retains your data. If you want to delete your data, you can use the DeregistrationPolicy attribute to request the deletion of your data.

Removes the specified Amazon Web Services account as a delegated administrator for Audit Manager.

When you remove a delegated administrator from your Audit Manager settings, you continue to have access to the evidence that you previously collected under that account. This is also the case when you deregister a delegated administrator from Organizations. However, Audit Manager stops collecting and attaching evidence to that delegated administrator account moving forward.

Keep in mind the following cleanup task if you use evidence finder:

Before you use your management account to remove a delegated administrator, make sure that the current delegated administrator account signs in to Audit Manager and disables evidence finder first. Disabling evidence finder automatically deletes the event data store that was created in their account when they enabled evidence finder. If this task isn’t completed, the event data store remains in their account. In this case, we recommend that the original delegated administrator goes to CloudTrail Lake and manually deletes the event data store: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/query-eds-disable-termination.html.

This cleanup task is necessary to ensure that you don't end up with multiple event data stores. Audit Manager ignores an unused event data store after you remove or change a delegated administrator account. However, the unused event data store continues to incur storage costs from CloudTrail Lake if you don't delete it.

When you deregister a delegated administrator account for Audit Manager, the data for that account isn’t deleted. If you want to delete resource data for a delegated administrator account, you must perform that task separately before you deregister the account. Either, you can do this in the Audit Manager console. Or, you can use one of the delete API operations that are provided by Audit Manager.

To delete your Audit Manager resource data, see the following instructions:

• DeleteAssessment: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessment.html (see also: Deleting an assessment: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-assessment.html in the Audit Manager User Guide)

• DeleteAssessmentFramework: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFramework.html (see also: Deleting a custom framework: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-custom-framework.html in the Audit Manager User Guide)

• DeleteAssessmentFrameworkShare: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFrameworkShare.html (see also: Deleting a share request: https://docs.aws.amazon.com/audit-manager/latest/userguide/deleting-shared-framework-requests.html in the Audit Manager User Guide)

• DeleteAssessmentReport: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentReport.html (see also: Deleting an assessment report: https://docs.aws.amazon.com/audit-manager/latest/userguide/generate-assessment-report.html#delete-assessment-report-steps in the Audit Manager User Guide)

• DeleteControl: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteControl.html (see also: Deleting a custom control: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-controls.html in the Audit Manager User Guide)

Creates a presigned Amazon S3 URL that can be used to upload a file as manual evidence.

For instructions on how to use this operation, see Upload a file from your browser : https://docs.aws.amazon.com/audit-manager/latest/userguide/upload-evidence.html#how-to-upload-manual-evidence-files in the Audit Manager User Guide.

The following restrictions apply to this operation:

• Maximum size of an individual evidence file: 100 MB

• Number of daily manual evidence uploads per control: 100

• Supported file formats: See Supported file types for manual evidence: https://docs.aws.amazon.com/audit-manager/latest/userguide/upload-evidence.html#supported-manual-evidence-files in the Audit Manager User Guide

Gets a list of all of the Amazon Web Services that you can choose to include in your assessment.

Lists the latest analytics data for controls within a specific control domain and a specific active assessment.

Lists the latest analytics data for control domains across all of your active assessments.

Lists analytics data for control domains within a specified active assessment.

Lists the latest analytics data for controls within a specific control domain across all active assessments.

Creates a share request for a custom framework in Audit Manager.

The share request specifies a recipient and notifies them that a custom framework is available. Recipients have 120 days to accept or decline the request. If no action is taken, the share request expires.

When you create a share request, Audit Manager stores a snapshot of your custom framework in the US East (N. Virginia) Amazon Web Services Region. Audit Manager also stores a backup of the same snapshot in the US West (Oregon) Amazon Web Services Region.

Audit Manager deletes the snapshot and the backup snapshot when one of the following events occurs:

• The sender revokes the share request.

• The recipient declines the share request.

• The recipient encounters an error and doesn't successfully accept the share request.

• The share request expires before the recipient responds to the request.

When a sender resends a share request: https://docs.aws.amazon.com/audit-manager/latest/userguide/framework-sharing.html#framework-sharing-resend, the snapshot is replaced with an updated version that corresponds with the latest version of the custom framework.

When a recipient accepts a share request, the snapshot is replicated into their Amazon Web Services account under the Amazon Web Services Region that was specified in the share request.