Control

Source: src/AWS/AuditManager/Control.ts

A custom control in AWS Audit Manager — a compliance requirement paired with the data sources (CloudTrail, Config, Security Hub, API calls, or manual evidence) Audit Manager collects evidence from to demonstrate it.

Note

Audit Manager must be registered in the account (RegisterAccount) before controls can be created.

Creating Controls

Manual-Evidence Control

import * as AWS from "alchemy/AWS";

const control = yield* AWS.AuditManager.Control("AccessReview", {
  description: "Quarterly review of privileged access",
  controlMappingSources: [{
    sourceName: "access-review-records",
    sourceSetUpOption: "Procedural_Controls_Mapping",
    sourceType: "MANUAL",
  }],
});

CloudTrail-Backed Control

const control = yield* AWS.AuditManager.Control("RootLoginMonitor", {
  description: "Detects console logins by the root user",
  controlMappingSources: [{
    sourceName: "root-console-logins",
    sourceSetUpOption: "System_Controls_Mapping",
    sourceType: "AWS_Cloudtrail",
    sourceKeyword: {
      keywordInputType: "SELECT_FROM_LIST",
      keywordValue: "ConsoleLogin",
    },
    sourceFrequency: "DAILY",
  }],
});