AWS Audit Services
Amazon Web Services (AWS) offers a suite of tools to help organizations manage and maintain compliance with various standards and regulations. Two of these tools are AWS Audit Manager and AWS Artifact.
AWS Audit Manager is a service that helps organizations manage and automate the process of auditing their AWS accounts. It provides a centralized platform for creating, organizing, and executing audit plans, as well as for storing and reviewing the results of those audits.
AWS Audit Manager allows users to create custom audit plans that specify the AWS services and resources that need to be audited, as well as the frequency and scope of the audits. These plans can be based on industry standards and best practices, such as the Payment Card Industry (PCI) Data Security Standard or the AWS Well-Architected Framework.
Once an audit plan has been created, AWS Audit Manager can automate the execution of the plan by scheduling regular audits, as well as by triggering audits in response to specific events. This helps to ensure that audits are performed consistently and on a regular basis.
AWS Audit Manager also provides tools for reviewing and analyzing the results of audits. This includes features such as the ability to create customizable dashboards and reports, as well as the ability to view detailed logs of the audit process. This helps organizations to identify any potential issues or non-compliant resources, and to take action to address them.
AWS Artifact is a related service that provides organizations with access to compliance-related documents and reports. This includes information such as certifications, attestations, and reports from third-party audits. AWS Artifact also provides access to the agreements and terms of service for various AWS services, as well as to the AWS Service Organization Control (SOC) reports.
To access the reports and agreements available in AWS Artifact, you can use the AWS Management Console, the AWS Command Line Interface (CLI), or the AWS Artifact API.
Get Wilklins Nyatteng’s stories in your inbox
Join Medium for free to get updates from this writer.
For example, you can use the AWS CLI to download a specific compliance report, such as an AWS Service Organization Control (SOC) report. The following command will download the SOC 3 report for the us-east-1 region:
aws artifact download-by-name --report-name "SOC 3" --region "us-east-1" --output-format "pdf"Alternatively, you can use the AWS Artifact API to programmatically access the reports and agreements available in AWS Artifact. The following is an example of how to use the ListReports API operation to retrieve a list of available compliance reports:
# Import the AWS SDK for Python (Boto3)
import boto3
# Create an AWS Artifact client
client = boto3.client('artifact')
# Call the ListReports API operation
response = client.list_reports()
# Print the names of the available reports
for report in response['reportDetailsList']:
print(report['name'])Together, AWS Audit Manager and AWS Artifact provide a comprehensive solution for managing compliance with various standards and regulations on AWS. They help organizations to automate and streamline the process of auditing their AWS environments, and to access the necessary documentation and reports to support their compliance efforts.
References:
- AWS Artifact: https://aws.amazon.com/artifact/
- AWS Audit Manager: https://aws.amazon.com/audit-manager/
About the author
Wilklins Nyatteng is a cyber security engineer with interest in penetration testing & vulnerability assessments, OSINT, cloud security. Certified Cyber Security professional by Trend Micro, 9x Microsoft Certified and AWS Solutions Architect — Associate.
Follow me on:
