/AWS1/CL_AUMEVIDENCEINSIGHTS¶
A breakdown of the latest compliance check status for the evidence in your Audit Manager assessments.
CONSTRUCTOR¶
IMPORTING¶
Optional arguments:¶
iv_noncompliantevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER¶
The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.
iv_compliantevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER¶
The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.
iv_inconclusiveevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER¶
The number of evidence that a compliance check ruling isn't available for. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail).
If evidence has a compliance check status of not applicable in the console, it's classified as inconclusive in
EvidenceInsightsdata.
Queryable Attributes¶
noncompliantEvidenceCount¶
The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_NONCOMPEVIDENCECOUNT() |
Getter for NONCOMPLIANTEVIDENCECOUNT, with configurable defa |
ASK_NONCOMPEVIDENCECOUNT() |
Getter for NONCOMPLIANTEVIDENCECOUNT w/ exceptions if field |
HAS_NONCOMPEVIDENCECOUNT() |
Determine if NONCOMPLIANTEVIDENCECOUNT has a value |
compliantEvidenceCount¶
The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_COMPLIANTEVIDENCECOUNT() |
Getter for COMPLIANTEVIDENCECOUNT, with configurable default |
ASK_COMPLIANTEVIDENCECOUNT() |
Getter for COMPLIANTEVIDENCECOUNT w/ exceptions if field has |
HAS_COMPLIANTEVIDENCECOUNT() |
Determine if COMPLIANTEVIDENCECOUNT has a value |
inconclusiveEvidenceCount¶
The number of evidence that a compliance check ruling isn't available for. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail).
If evidence has a compliance check status of not applicable in the console, it's classified as inconclusive in
EvidenceInsightsdata.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_INCONCLUSIVEEVIDENCECNT() |
Getter for INCONCLUSIVEEVIDENCECOUNT, with configurable defa |
ASK_INCONCLUSIVEEVIDENCECNT() |
Getter for INCONCLUSIVEEVIDENCECOUNT w/ exceptions if field |
HAS_INCONCLUSIVEEVIDENCECNT() |
Determine if INCONCLUSIVEEVIDENCECOUNT has a value |