Assessment

Source: src/AWS/AuditManager/Assessment.ts

An AWS Audit Manager assessment — an active evidence-collection engagement created from a framework, continuously gathering evidence for the controls in scope.

Note

Audit Manager must be registered in the account (RegisterAccount) before assessments can be created.

Creating Assessments

import * as AWS from "alchemy/AWS";

const reports = yield* AWS.S3.Bucket("AuditReports", {});

const owner = yield* AWS.IAM.Role("AuditOwner", {
  assumeRolePolicyDocument: {
    Version: "2012-10-17",
    Statement: [{
      Effect: "Allow",
      Principal: { Service: "auditmanager.amazonaws.com" },
      Action: ["sts:AssumeRole"],
    }],
  },
});

const assessment = yield* AWS.AuditManager.Assessment("Quarterly", {
  frameworkId: framework.frameworkId,
  assessmentReportsDestination: {
    destination: reports.bucketName.apply((name) => `s3://${name}`),
  },
  roles: [{ roleType: "PROCESS_OWNER", roleArn: owner.roleArn }],
});