Continuously assess controls for risk and compliance
summary
AWS Audit Manager, launched December 2020, continuously collects and organizes evidence from CloudTrail, Config, Security Hub and API calls, stores reports in S3, and enforces integrity via checksums. The service ships with 14 prebuilt frameworks (PCI, HIPAA, CIS, SOC 2, FedRAMP, etc.), surfaces automated and manual evidence, supports delegated regional admin accounts, schedules API collection daily/weekly/monthly, and claims it reduces 60% of evidence-collection time with evidence available within 24 hours.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:57Challenges
- 3:35Use Cases
- 6:59AWS Audit Manager
- 7:39Audit Manager Benefits
- 8:35Assessment Frameworks
- 9:09Data Sources
- 9:53Partners
- 10:26Setup
- 12:15Assessments
- 15:35Data Collection
- 18:06Control Page
- 18:59Evidence Page
- 20:02Manual Evidence
- 22:13Manual Evidence Report
- 23:20Assessment Report
- 25:28Customization
related talks
58mImplementing compliance, assurance, and auditing on
56mCloud compliance journey: Compliance and audits
50mOptimizing audits with automation
48mJourney to protected workloads on AWS
55mAccelerating auditing and compliance for generative AI on AWS
19mA close look at compliance with AWS Cloud Audit Academy
30mHow to implement compliance at scale with the Three Lines of Defense model
27mIntroduction to AWS Security