Automating Audit Evidence Collection Natively in AWS
3 minute read | Last updated 2-Aug-2022 | 
AWS Cloud
The AWS Audit Manager can help organize all of your audit and compliance evidence. This solution helps streamline the collection of non-AWS resource data points. More in this Twitter thread .
probably not. tl:dr > it helps map your usage to various regulations & standards to give you a better idea of your risk & compliance posture
some thoughts & a blog post analysis
#cloud #security
#cloud #security
https://aws.amazon.com/blogs/security/streamlining-evidence-collection-with-aws-audit-manager/
anything that helps smooth out the evidence gathering process is usually a big win, let’s dig in
#cloud #security
this post shows how an approach to streamlining your custom metrics/data points
#cloud #security
you setup an HTTPS endpoint via @awscloud API Gateway. that endpoint triggers a Lambda which then stores the evidence in S3 while also triggering a Step Function to process the evidence
it’s simple, #serverless, and low cost
#cloud #security
@awscloud Audit Manager associated evidence to a Control within an Assessments
you need to know where this evidence belongs, in order to use this solution
#cloud #security
and
https://docs.aws.amazon.com/audit-manager/latest/userguide/how-evidence-is-collected.html
#cloud #security
streamlining the evidence/control/assessment alignment process would be a huge win & make this solution a lot more useful
/ #cloud #security