auditmanager

62 actions in the auditmanager service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

auditmanager:AssociateAssessmentReportEvidenceFolder

Write

Grants permission to associate an evidence folder with an assessment report in AWS Audit Manager

auditmanager:BatchAssociateAssessmentReportEvidence

Write

Grants permission to associate a list of evidence to an assessment report in AWS Audit Manager

auditmanager:BatchCreateDelegationByAssessment

Write

Grants permission to create delegations for an assessment in AWS Audit Manager

auditmanager:BatchDeleteDelegationByAssessment

Write

Grants permission to delete delegations for an assessment in AWS Audit Manager

auditmanager:BatchDisassociateAssessmentReportEvidence

Write

Grants permission to disassociate a list of evidence from an assessment report in AWS Audit Manager

auditmanager:BatchImportEvidenceToAssessmentControl

Write

Grants permission to import a list of evidence to an assessment control in AWS Audit Manager

auditmanager:CreateAssessment

Write

Grants permission to create an assessment to be used with AWS Audit Manager

auditmanager:CreateAssessmentFramework

Write

Grants permission to create a framework for use in AWS Audit Manager

auditmanager:CreateAssessmentReport

Write

Grants permission to create an assessment report in AWS Audit Manager

auditmanager:CreateControl

Write

Grants permission to create a control to be used in AWS Audit Manager

auditmanager:DeleteAssessment

Write

Grants permission to delete an assessment in AWS Audit Manager

auditmanager:DeleteAssessmentFramework

Write

Grants permission to delete an assessment framework in AWS Audit Manager

auditmanager:DeleteAssessmentFrameworkShare

Write

Grants permission to delete a share request for a custom framework in AWS Audit Manager

auditmanager:DeleteAssessmentReport

Write

Grants permission to delete an assessment report in AWS Audit Manager

auditmanager:DeleteControl

Write

Grants permission to delete a control in AWS Audit Manager

auditmanager:DeregisterAccount

Write

Grants permission to deregister an account in AWS Audit Manager

auditmanager:DeregisterOrganizationAdminAccount

Write

Grants permission to deregister the delegated administrator account for AWS Audit Manager

auditmanager:DisassociateAssessmentReportEvidenceFolder

Write

Grants permission to disassociate an evidence folder from an assessment report in AWS Audit Manager

auditmanager:GetAccountStatus

Read

Grants permission to get the status of an account in AWS Audit Manager

auditmanager:GetAssessment

Read

Grants permission to get an assessment created in AWS Audit Manager

auditmanager:GetAssessmentFramework

Read

Grants permission to get an assessment framework in AWS Audit Manager

auditmanager:GetAssessmentReportUrl

Read

Grants permission to get the URL for an assessment report in AWS Audit Manager

auditmanager:GetChangeLogs

Read

Grants permission to get changelogs for an assessment in AWS Audit Manager

auditmanager:GetControl

Read

Grants permission to get a control in AWS Audit Manager

auditmanager:GetDelegations

List

Grants permission to get all delegations in AWS Audit Manager

auditmanager:GetEvidence

Read

Grants permission to get evidence from AWS Audit Manager

auditmanager:GetEvidenceByEvidenceFolder

Read

Grants permission to get all the evidence from an evidence folder in AWS Audit Manager

auditmanager:GetEvidenceFileUploadUrl

Read

Grants permission to get a presigned Amazon S3 URL that can be used to upload a file as manual evidence

auditmanager:GetEvidenceFolder

Read

Grants permission to get the evidence folder from AWS Audit Manager

auditmanager:GetEvidenceFoldersByAssessment

Read

Grants permission to get the evidence folders from an assessment in AWS Audit Manager

auditmanager:GetEvidenceFoldersByAssessmentControl

Read

Grants permission to get the evidence folders from an assessment control in AWS Audit Manager

auditmanager:GetInsights

Read

Grants permission to get analytics data for all active assessments

auditmanager:GetInsightsByAssessment

Read

Grants permission to get analytics data for a specific active assessment

auditmanager:GetOrganizationAdminAccount

Read

Grants permission to get the delegated administrator account in AWS Audit Manager

auditmanager:GetServicesInScope

Read

Grants permission to get the services in scope for an assessment in AWS Audit Manager

auditmanager:GetSettings

Read

Grants permission to get all settings configured in AWS Audit Manager

auditmanager:ListAssessmentControlInsightsByControlDomain

List

Grants permission to list analytics data for controls in a specific control domain and active assessment

auditmanager:ListAssessmentFrameworks

List

Grants permission to list all assessment frameworks in AWS Audit Manager

auditmanager:ListAssessmentFrameworkShareRequests

List

Grants permission to list all sent or received share requests for custom frameworks in AWS Audit Manager

auditmanager:ListAssessmentReports

List

Grants permission to list all assessment reports in AWS Audit Manager

auditmanager:ListAssessments

List

Grants permission to list all assessments in AWS Audit Manager

auditmanager:ListControlDomainInsights

List

Grants permission to list analytics data for control domains across all active assessments

auditmanager:ListControlDomainInsightsByAssessment

List

Grants permission to list analytics data for control domains in a specific active assessment

auditmanager:ListControlInsightsByControlDomain

List

Grants permission to list analytics data for controls in a specific control domain across all active assessments

auditmanager:ListControls

List

Grants permission to list all controls in AWS Audit Manager

auditmanager:ListKeywordsForDataSource

List

Grants permission to list all the data source keywords in AWS Audit Manager

auditmanager:ListNotifications

List

Grants permission to list all notifications in AWS Audit Manager

auditmanager:ListTagsForResource

Read

Grants permission to list tags for an AWS Audit Manager resource

auditmanager:RegisterAccount

Write

Grants permission to register an account in AWS Audit Manager

auditmanager:RegisterOrganizationAdminAccount

Write

Grants permission to register an account within the organization as the delegated administrator for AWS Audit Manager

auditmanager:StartAssessmentFrameworkShare

Write

Grants permission to create a share request for a custom framework in AWS Audit Manager

auditmanager:TagResource

Tagging

Grants permission to tag an AWS Audit Manager resource

auditmanager:UntagResource

Tagging

Grants permission to untag an AWS Audit Manager resource

auditmanager:UpdateAssessment

Write

Grants permission to update an assessment in AWS Audit Manager

auditmanager:UpdateAssessmentControl

Write

Grants permission to update an assessment control in AWS Audit Manager

auditmanager:UpdateAssessmentControlSetStatus

Write

Grants permission to update the status of an assessment control set in AWS Audit Manager

auditmanager:UpdateAssessmentFramework

Write

Grants permission to update an assessment framework in AWS Audit Manager

auditmanager:UpdateAssessmentFrameworkShare

Write

Grants permission to update a share request for a custom framework in AWS Audit Manager

auditmanager:UpdateAssessmentStatus

Write

Grants permission to update the status of an assessment in AWS Audit Manager

auditmanager:UpdateControl

Write

Grants permission to update a control in AWS Audit Manager

auditmanager:UpdateSettings

Write

Grants permission to update settings in AWS Audit Manager

auditmanager:ValidateAssessmentReportIntegrity

Read

Grants permission to validate the integrity of an assessment report in AWS Audit Manager