Amazon Audit Manager events - Amazon EventBridge
Service eventsEvents via CloudTrail
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Audit Manager events

Audit Manager sends service events directly to EventBridge, as well as via Amazon CloudTrail.

Audit Manager service events

Audit Manager sends the following events directly to EventBridge:

  • Assessment Created

  • Assessment Updated

  • Assessment Deleted

  • Assessment ControlSet Delegation Created

  • Assessment ControlSet Under Review

  • Assessment ControlSet Reviewed

  • Assessment Control Reviewed

  • Daily Assessment Evidence Collected

  • Assessment Report Created

  • Assessment Report Failed

  • Custom Framework Created

  • Custom Framework Updated

  • Custom Framework Deleted

  • Framework Share Created

  • Framework Share Accepted

  • Framework Share Declined

  • Framework Share Revoked

  • Framework Share Expired

  • Custom Control Created

  • Custom Control Updated

  • Custom Control Deleted

Delivery type: Best effort

To match against all events from this service, create an event pattern that matches against the following event attribute:

  • source: aws.auditmanager

{
  "source": ["aws.auditmanager"]
}

To match against specific events, include a detail-type attribute specifying an array of event names to match. For example:

{
  "source": ["aws.auditmanager"],
  "detail-type": ["Assessment Created"]
}

For more information, see Creating event patterns in the Amazon EventBridge User Guide.

Audit Manager events delivered via Amazon CloudTrail

Amazon CloudTrail sends events originating from Audit Manager to EventBridge. Amazon services deliver events to CloudTrail on a best effort basis. For more information, see Amazon service events delivered via Amazon CloudTrail in the Amazon EventBridge User Guide.

To match events from this service delivered by Amazon CloudTrail, create an event pattern that matches against the following event attributes:

  • source: aws.auditmanager

  • eventSource: auditmanager.amazonaws.com

{
  "source": ["aws.auditmanager"],
  "detail-type": ["Amazon API Call via CloudTrail"],
  "detail": {
    "eventSource": ["auditmanager.amazonaws.com"]
  }
}

To match against a specific API calls from this service, include an eventName attribute specifying an array of API calls to match:

{
  "source": ["aws.auditmanager"],
  "detail-type": ["Amazon API Call via CloudTrail"],
  "detail": {
    "eventSource": ["auditmanager.amazonaws.com"],
    "eventName": ["api-action-name"]
  }
}