AWS Audit Manager
Audit evidence collection
Automatically collects evidence from Config, CloudTrail, Security Hub… and maps it to prebuilt frameworks (CIS, PCI DSS, HIPAA, SOC 2) to prepare audit reports.
- Cost$$ Medium
- Difficulty●●●●●
- Costs money when idle?No
- Serverless
- In examsCLF · SOA
Think of it asLike an assistant who files invoices and receipts into the right sections for audit season.
When to use it
✓ Use it when
You need to prepare for periodic audits of workloads on AWS.
✗ Avoid it when
You only need AWS's own compliance reports → Artifact; continuous configuration assessment → Config.
Common uses
- Preparing for a PCI DSS audit
- Gathering evidence for SOC 2
- Tracking compliance status by control
What does it cost?
- Pricing model: Charged by the number of resource assessments (evidence) collected.
