/AWS1/CL_AUMINSIGHTS

A summary of the latest analytics data for all your active assessments.

This summary is a snapshot of the data that your active assessments collected on the lastUpdated date. It’s important to understand that the following totals are daily counts based on this date — they aren’t a total sum to date.

The Insights data is eventually consistent. This means that, when you read data from Insights, the response might not instantly reflect the results of a recently completed write or update operation. If you repeat your read request after a few hours, the response should return the latest data.

If you delete an assessment or change its status to inactive, InsightsByAssessment includes data for that assessment as follows.

• Inactive assessments - If Audit Manager collected evidence for your assessment before you changed it inactive, that evidence is included in the InsightsByAssessment counts for that day.

• Deleted assessments - If Audit Manager collected evidence for your assessment before you deleted it, that evidence isn't included in the InsightsByAssessment counts for that day.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_activeassessmentscount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The number of active assessments in Audit Manager.

iv_noncompliantevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The number of compliance check evidence that Audit Manager classified as non-compliant on the lastUpdated date. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.

iv_compliantevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The number of compliance check evidence that Audit Manager classified as compliant on the lastUpdated date. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.

iv_inconclusiveevidencecount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The number of evidence without a compliance check ruling. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example: manual evidence, API calls, or CloudTrail).

If evidence has a compliance check status of not applicable, it's classed as inconclusive in Insights data.

iv_assessmentctlsctbyncmpe00 TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The number of assessment controls that collected non-compliant evidence on the lastUpdated date.

iv_totalassessmentctlscount TYPE /AWS1/AUMNULLABLEINTEGER /AWS1/AUMNULLABLEINTEGER

The total number of controls across all active assessments.

iv_lastupdated TYPE /AWS1/AUMTIMESTAMP /AWS1/AUMTIMESTAMP

The time when the cross-assessment insights were last updated.

---

Queryable Attributes

activeAssessmentsCount

The number of active assessments in Audit Manager.

Accessible with the following methods

Method	Description
GET_ACTIVEASSESSMENTSCOUNT()	Getter for ACTIVEASSESSMENTSCOUNT, with configurable default
ASK_ACTIVEASSESSMENTSCOUNT()	Getter for ACTIVEASSESSMENTSCOUNT w/ exceptions if field has
HAS_ACTIVEASSESSMENTSCOUNT()	Determine if ACTIVEASSESSMENTSCOUNT has a value

noncompliantEvidenceCount

The number of compliance check evidence that Audit Manager classified as non-compliant on the lastUpdated date. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.

Accessible with the following methods

Method	Description
GET_NONCOMPEVIDENCECOUNT()	Getter for NONCOMPLIANTEVIDENCECOUNT, with configurable defa
ASK_NONCOMPEVIDENCECOUNT()	Getter for NONCOMPLIANTEVIDENCECOUNT w/ exceptions if field
HAS_NONCOMPEVIDENCECOUNT()	Determine if NONCOMPLIANTEVIDENCECOUNT has a value

compliantEvidenceCount

The number of compliance check evidence that Audit Manager classified as compliant on the lastUpdated date. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.

Accessible with the following methods

Method	Description
GET_COMPLIANTEVIDENCECOUNT()	Getter for COMPLIANTEVIDENCECOUNT, with configurable default
ASK_COMPLIANTEVIDENCECOUNT()	Getter for COMPLIANTEVIDENCECOUNT w/ exceptions if field has
HAS_COMPLIANTEVIDENCECOUNT()	Determine if COMPLIANTEVIDENCECOUNT has a value

inconclusiveEvidenceCount

The number of evidence without a compliance check ruling. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example: manual evidence, API calls, or CloudTrail).

If evidence has a compliance check status of not applicable, it's classed as inconclusive in Insights data.

Accessible with the following methods

Method	Description
GET_INCONCLUSIVEEVIDENCECNT()	Getter for INCONCLUSIVEEVIDENCECOUNT, with configurable defa
ASK_INCONCLUSIVEEVIDENCECNT()	Getter for INCONCLUSIVEEVIDENCECOUNT w/ exceptions if field
HAS_INCONCLUSIVEEVIDENCECNT()	Determine if INCONCLUSIVEEVIDENCECOUNT has a value

assessmentControlsCountByNoncompliantEvidence

The number of assessment controls that collected non-compliant evidence on the lastUpdated date.

Accessible with the following methods

Method	Description
GET_ASSESSMENTCTLSCTBYNCMP00()	Getter for ASSESSMENTCTLSCTBYNCMPEVID00, with configurable d
ASK_ASSESSMENTCTLSCTBYNCMP00()	Getter for ASSESSMENTCTLSCTBYNCMPEVID00 w/ exceptions if fie
HAS_ASSESSMENTCTLSCTBYNCMP00()	Determine if ASSESSMENTCTLSCTBYNCMPEVID00 has a value

totalAssessmentControlsCount

The total number of controls across all active assessments.

Accessible with the following methods

Method	Description
GET_TOTALASSESSMENTCTLSCOUNT()	Getter for TOTALASSESSMENTCONTROLSCOUNT, with configurable d
ASK_TOTALASSESSMENTCTLSCOUNT()	Getter for TOTALASSESSMENTCONTROLSCOUNT w/ exceptions if fie
HAS_TOTALASSESSMENTCTLSCOUNT()	Determine if TOTALASSESSMENTCONTROLSCOUNT has a value

lastUpdated

The time when the cross-assessment insights were last updated.

Accessible with the following methods

Method	Description
GET_LASTUPDATED()	Getter for LASTUPDATED, with configurable default
ASK_LASTUPDATED()	Getter for LASTUPDATED w/ exceptions if field has no value
HAS_LASTUPDATED()	Determine if LASTUPDATED has a value