AWS Audit Manager
Compliance & GovernanceAWS Audit Manager helps you continuously audit your AWS usage to simplify how you assess risk and compliance with regulations and industry standards.
Key Features
- Pre-built Frameworks: PCI DSS, HIPAA, SOC 2, GDPR, NIST 800-53, NIST CSF, CIS Benchmarks, ISO 27001, FedRAMP
- Custom Frameworks: build your own compliance frameworks with custom controls
- Automated Evidence Collection: automatically collects evidence from Config, CloudTrail, Security Hub, and manual sources
- Assessment Reports: generate auditor-ready reports with evidence mapped to controls
- Delegation: assign control owners to collect manual evidence
How It Works
- Select a framework (e.g., PCI DSS v4.0)
- Audit Manager maps framework controls to AWS data sources
- Evidence is automatically collected and organized by control
- Review evidence, add manual evidence, generate assessment report
- Share report with external auditors
Related AWS Services
Related Terms
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
A prescriptive security configuration checklist from the Center for Internet Security that defines best practices for securing AWS accounts.
Managed or custom rules that continuously evaluate AWS resource configurations against desired settings, flagging non-compliant resources automatically.
A chronological record of all activities in an AWS account (API calls, logins, configuration changes) used for security investigation and compliance evidence.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.