aws_auditmanager_assessment

account_id

Type: STRING

assessment

Type: STRUCT
Provider name: assessment

• arn
  Type: STRING
  Provider name: arn
  Description: The Amazon Resource Name (ARN) of the assessment.
  
• aws_account
  Type: STRUCT
  Provider name: awsAccount
  Description: The Amazon Web Services account that’s associated with the assessment.
  
  • email_address
    Type: STRING
    Provider name: emailAddress
    Description: The email address that’s associated with the Amazon Web Services account.
    
  • id
    Type: STRING
    Provider name: id
    Description: The identifier for the Amazon Web Services account.
    
  • name
    Type: STRING
    Provider name: name
    Description: The name of the Amazon Web Services account.
    
• framework
  Type: STRUCT
  Provider name: framework
  Description: The framework that the assessment was created from.
  
  • arn
    Type: STRING
    Provider name: arn
    Description: The Amazon Resource Name (ARN) of the framework.
    
  • control_sets
    Type: UNORDERED_LIST_STRUCT
    Provider name: controlSets
    Description: The control sets that are associated with the framework.
    
    • controls
      Type: UNORDERED_LIST_STRUCT
      Provider name: controls
      Description: The list of controls that’s contained with the control set.
      
      • assessment_report_evidence_count
        Type: INT32
        Provider name: assessmentReportEvidenceCount
        Description: The amount of evidence in the assessment report.
        
      • comments
        Type: UNORDERED_LIST_STRUCT
        Provider name: comments
        Description: The list of comments that’s attached to the control.
        
        • author_name
          Type: STRING
          Provider name: authorName
          Description: The name of the user who authored the comment.
          
        • comment_body
          Type: STRING
          Provider name: commentBody
          Description: The body text of a control comment.
          
        • posted_date
          Type: TIMESTAMP
          Provider name: postedDate
          Description: The time when the comment was posted.
          
      • description
        Type: STRING
        Provider name: description
        Description: The description of the control.
        
      • evidence_count
        Type: INT32
        Provider name: evidenceCount
        Description: The amount of evidence that’s collected for the control.
        
      • evidence_sources
        Type: UNORDERED_LIST_STRING
        Provider name: evidenceSources
        Description: The list of data sources for the evidence.
        
      • id
        Type: STRING
        Provider name: id
        Description: The identifier for the control.
        
      • name
        Type: STRING
        Provider name: name
        Description: The name of the control.
        
      • response
        Type: STRING
        Provider name: response
        Description: The response of the control.
        
      • status
        Type: STRING
        Provider name: status
        Description: The status of the control.
        
    • delegations
      Type: UNORDERED_LIST_STRUCT
      Provider name: delegations
      Description: The delegations that are associated with the control set.
      
      • assessment_id
        Type: STRING
        Provider name: assessmentId
        Description: The identifier for the assessment that’s associated with the delegation.
        
      • assessment_name
        Type: STRING
        Provider name: assessmentName
        Description: The name of the assessment that’s associated with the delegation.
        
      • comment
        Type: STRING
        Provider name: comment
        Description: The comment that’s related to the delegation.
        
      • control_set_id
        Type: STRING
        Provider name: controlSetId
        Description: The identifier for the control set that’s associated with the delegation.
        
      • created_by
        Type: STRING
        Provider name: createdBy
        Description: The user or role that created the delegation.
        
      • creation_time
        Type: TIMESTAMP
        Provider name: creationTime
        Description: Specifies when the delegation was created.
        
      • id
        Type: STRING
        Provider name: id
        Description: The unique identifier for the delegation.
        
      • last_updated
        Type: TIMESTAMP
        Provider name: lastUpdated
        Description: Specifies when the delegation was last updated.
        
      • role_arn
        Type: STRING
        Provider name: roleArn
        Description: The Amazon Resource Name (ARN) of the IAM role.
        
      • role_type
        Type: STRING
        Provider name: roleType
        Description: The type of customer persona. In CreateAssessment, roleType can only be PROCESS_OWNER. In UpdateSettings, roleType can only be PROCESS_OWNER. In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.
        
      • status
        Type: STRING
        Provider name: status
        Description: The status of the delegation.
        
    • description
      Type: STRING
      Provider name: description
      Description: The description for the control set.
      
    • id
      Type: STRING
      Provider name: id
      Description: The identifier of the control set in the assessment. This is the control set name in a plain string format.
      
    • manual_evidence_count
      Type: INT32
      Provider name: manualEvidenceCount
      Description: The total number of evidence objects that are uploaded manually to the control set.
      
    • roles
      Type: UNORDERED_LIST_STRUCT
      Provider name: roles
      Description: The roles that are associated with the control set.
      
      • role_arn
        Type: STRING
        Provider name: roleArn
        Description: The Amazon Resource Name (ARN) of the IAM role.
        
      • role_type
        Type: STRING
        Provider name: roleType
        Description: The type of customer persona. In CreateAssessment, roleType can only be PROCESS_OWNER. In UpdateSettings, roleType can only be PROCESS_OWNER. In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.
        
    • status
      Type: STRING
      Provider name: status
      Description: The current status of the control set.
      
    • system_evidence_count
      Type: INT32
      Provider name: systemEvidenceCount
      Description: The total number of evidence objects that are retrieved automatically for the control set.
      
  • id
    Type: STRING
    Provider name: id
    Description: The unique identifier for the framework.
    
  • metadata
    Type: STRUCT
    Provider name: metadata
    
    • compliance_type
      Type: STRING
      Provider name: complianceType
      Description: The compliance standard that’s associated with the framework. For example, this could be PCI DSS or HIPAA.
      
    • description
      Type: STRING
      Provider name: description
      Description: The description of the framework.
      
    • logo
      Type: STRING
      Provider name: logo
      Description: The logo that’s associated with the framework.
      
    • name
      Type: STRING
      Provider name: name
      Description: The name of the framework.
      
• metadata
  Type: STRUCT
  Provider name: metadata
  Description: The metadata for the assessment.
  
  • assessment_reports_destination
    Type: STRUCT
    Provider name: assessmentReportsDestination
    Description: The destination that evidence reports are stored in for the assessment.
    
    • destination
      Type: STRING
      Provider name: destination
      Description: The destination bucket where Audit Manager stores assessment reports.
      
    • destination_type
      Type: STRING
      Provider name: destinationType
      Description: The destination type, such as Amazon S3.
      
  • compliance_type
    Type: STRING
    Provider name: complianceType
    Description: The name of the compliance standard that’s related to the assessment, such as PCI-DSS.
    
  • creation_time
    Type: TIMESTAMP
    Provider name: creationTime
    Description: Specifies when the assessment was created.
    
  • delegations
    Type: UNORDERED_LIST_STRUCT
    Provider name: delegations
    Description: The delegations that are associated with the assessment.
    
    • assessment_id
      Type: STRING
      Provider name: assessmentId
      Description: The identifier for the assessment that’s associated with the delegation.
      
    • assessment_name
      Type: STRING
      Provider name: assessmentName
      Description: The name of the assessment that’s associated with the delegation.
      
    • comment
      Type: STRING
      Provider name: comment
      Description: The comment that’s related to the delegation.
      
    • control_set_id
      Type: STRING
      Provider name: controlSetId
      Description: The identifier for the control set that’s associated with the delegation.
      
    • created_by
      Type: STRING
      Provider name: createdBy
      Description: The user or role that created the delegation.
      
    • creation_time
      Type: TIMESTAMP
      Provider name: creationTime
      Description: Specifies when the delegation was created.
      
    • id
      Type: STRING
      Provider name: id
      Description: The unique identifier for the delegation.
      
    • last_updated
      Type: TIMESTAMP
      Provider name: lastUpdated
      Description: Specifies when the delegation was last updated.
      
    • role_arn
      Type: STRING
      Provider name: roleArn
      Description: The Amazon Resource Name (ARN) of the IAM role.
      
    • role_type
      Type: STRING
      Provider name: roleType
      Description: The type of customer persona. In CreateAssessment, roleType can only be PROCESS_OWNER. In UpdateSettings, roleType can only be PROCESS_OWNER. In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.
      
    • status
      Type: STRING
      Provider name: status
      Description: The status of the delegation.
      
  • description
    Type: STRING
    Provider name: description
    Description: The description of the assessment.
    
  • id
    Type: STRING
    Provider name: id
    Description: The unique identifier for the assessment.
    
  • last_updated
    Type: TIMESTAMP
    Provider name: lastUpdated
    Description: The time of the most recent update.
    
  • name
    Type: STRING
    Provider name: name
    Description: The name of the assessment.
    
  • roles
    Type: UNORDERED_LIST_STRUCT
    Provider name: roles
    Description: The roles that are associated with the assessment.
    
    • role_arn
      Type: STRING
      Provider name: roleArn
      Description: The Amazon Resource Name (ARN) of the IAM role.
      
    • role_type
      Type: STRING
      Provider name: roleType
      Description: The type of customer persona. In CreateAssessment, roleType can only be PROCESS_OWNER. In UpdateSettings, roleType can only be PROCESS_OWNER. In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.
      
  • scope
    Type: STRUCT
    Provider name: scope
    Description: The wrapper of Amazon Web Services accounts and services that are in scope for the assessment.
    
    • aws_accounts
      Type: UNORDERED_LIST_STRUCT
      Provider name: awsAccounts
      Description: The Amazon Web Services accounts that are included in the scope of the assessment.
      
      • email_address
        Type: STRING
        Provider name: emailAddress
        Description: The email address that’s associated with the Amazon Web Services account.
        
      • id
        Type: STRING
        Provider name: id
        Description: The identifier for the Amazon Web Services account.
        
      • name
        Type: STRING
        Provider name: name
        Description: The name of the Amazon Web Services account.
        
    • aws_services
      Type: UNORDERED_LIST_STRUCT
      Provider name: awsServices
      Description: The Amazon Web Services services that are included in the scope of the assessment. This API parameter is no longer supported. If you use this parameter to specify one or more Amazon Web Services services, Audit Manager ignores this input. Instead, the value for awsServices will show as empty.
      
      • service_name
        Type: STRING
        Provider name: serviceName
        Description: The name of the Amazon Web Services service.
        
  • status
    Type: STRING
    Provider name: status
    Description: The overall status of the assessment.
    

tags

Type: UNORDERED_LIST_STRING

user_role

Type: STRUCT
Provider name: userRole

• role_arn
  Type: STRING
  Provider name: roleArn
  Description: The Amazon Resource Name (ARN) of the IAM role.
  
• role_type
  Type: STRING
  Provider name: roleType
  Description: The type of customer persona. In CreateAssessment, roleType can only be PROCESS_OWNER. In UpdateSettings, roleType can only be PROCESS_OWNER. In BatchCreateDelegationByAssessment, roleType can only be RESOURCE_OWNER.