An organization is preparing evidence for an audit framework.
It wants to collect configuration and activity evidence from its AWS environment.
Which AWS service is primarily used?
AWS Audit Manager manages evidence collection against audit frameworks and helps organize preparation for an assessment.
Detailed explanation
Inspector manages vulnerability findings; it is not the service for collecting evidence against an audit framework.
Inspector manages vulnerability findings; it is not the service for collecting evidence against an audit framework.
Audit Manager collects and organizes evidence from AWS services to support an assessment.
Audit Manager collects and organizes evidence from AWS services to support an assessment.
Shield provides DDoS detection and mitigation, not audit-framework evidence management.
Shield provides DDoS detection and mitigation, not audit-framework evidence management.
Artifact provides AWS-side compliance documents and does not collect the customer's environment evidence.
Artifact provides AWS-side compliance documents and does not collect the customer's environment evidence.
Check official documentation
Compare the following points with the official documentation.
AWS Audit Manager User GuideのHow AWS Audit Manager collects evidenceを確認する。
What to confirm
監査対象アカウントやサービスを指定し、設定データ・APIアクティビティなどの証拠を収集する。
Key points
- AWS Audit Manager
- Audit framework
- Evidence collection
Notes
- Environment: AWS公式Audit Managerドキュメントの確認
- Confirm current service capabilities and compliance guidance in the official AWS documentation.
Foundation review
Evidence management
Audit Manager helps organize customer-environment evidence for an assessment.
Document source
AWS Artifact and Audit Manager address different evidence boundaries.