Documentation

A summary of the latest analytics data for a specific active assessment.

This summary is a snapshot of the data that was collected on the lastUpdated date. It’s important to understand that the totals in InsightsByAssessment are daily counts based on this date — they aren’t a total sum to date.

The InsightsByAssessment data is eventually consistent. This means that when you read data from InsightsByAssessment, the response might not instantly reflect the results of a recently completed write or update operation. If you repeat your read request after a few hours, the response returns the latest data.

If you delete an assessment or change its status to inactive, InsightsByAssessment includes data for that assessment as follows.

• Inactive assessments - If Audit Manager collected evidence for your assessment before you changed it inactive, that evidence is included in the InsightsByAssessment counts for that day.
• Deleted assessments - If Audit Manager collected evidence for your assessment before you deleted it, that evidence isn't included in the InsightsByAssessment counts for that day.

See: newInsightsByAssessment smart constructor.

Create a value of InsightsByAssessment with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:assessmentControlsCountByNoncompliantEvidence:InsightsByAssessment', insightsByAssessment_assessmentControlsCountByNoncompliantEvidence - The number of assessment controls that collected non-compliant evidence on the lastUpdated date.

$sel:compliantEvidenceCount:InsightsByAssessment', insightsByAssessment_compliantEvidenceCount - The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.

$sel:inconclusiveEvidenceCount:InsightsByAssessment', insightsByAssessment_inconclusiveEvidenceCount - The amount of evidence without a compliance check ruling. Evidence is inconclusive if the associated control uses Security Hub or Config as a data source and you didn't enable those services. This is also the case if a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail).

If evidence has a compliance check status of not applicable, it's classified as inconclusive in InsightsByAssessment data.

$sel:lastUpdated:InsightsByAssessment', insightsByAssessment_lastUpdated - The time when the assessment insights were last updated.

$sel:noncompliantEvidenceCount:InsightsByAssessment', insightsByAssessment_noncompliantEvidenceCount - The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.

$sel:totalAssessmentControlsCount:InsightsByAssessment', insightsByAssessment_totalAssessmentControlsCount - The total number of controls in the assessment.

The number of assessment controls that collected non-compliant evidence on the lastUpdated date.

The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a Pass ruling, or collected from Config with a Compliant ruling.

The amount of evidence without a compliance check ruling. Evidence is inconclusive if the associated control uses Security Hub or Config as a data source and you didn't enable those services. This is also the case if a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail).

If evidence has a compliance check status of not applicable, it's classified as inconclusive in InsightsByAssessment data.

The time when the assessment insights were last updated.

The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a Fail ruling, or collected from Config with a Non-compliant ruling.

The total number of controls in the assessment.