Table: aws_auditmanager_framework - Query AWS Audit Manager Framework using SQL

The AWS Audit Manager Framework is a feature of AWS Audit Manager that helps you continuously audit your AWS usage to simplify your compliance with regulations and industry standards. It automates evidence collection to enable you to scale your audit capability in AWS, reducing the effort needed to assess risk and compliance. This feature is especially useful for organizations that need to maintain a consistent audit process across various AWS services.

Table Usage Guide

The aws_auditmanager_framework table in Steampipe provides you with information about frameworks within AWS Audit Manager. This table allows you, as a DevOps engineer, to query framework-specific details, including the framework's ARN, ID, type, and associated metadata. You can utilize this table to gather insights on frameworks, such as the number of controls associated with each framework, the compliance type, and more. The schema outlines the various attributes of the Audit Manager Framework for you, including the framework ARN, creation date, last updated date, and associated tags.

Examples

Basic info

Explore which audit frameworks are currently implemented in your AWS environment. This can help in assessing your existing auditing strategies and identifying areas for improvement.

select
  name,
  arn,
  id,
  type
from
  aws_auditmanager_framework;

select
  name,
  arn,
  id,
  type
from
  aws_auditmanager_framework;

List custom audit manager frameworks

Uncover the details of your custom audit frameworks within AWS Audit Manager. This query is useful for understanding the scope and details of your custom configurations, aiding in the management and review of your audit frameworks.

select
  name,
  arn,
  id,
  type
from
  aws_auditmanager_framework
where
  type = 'Custom';

select
  name,
  arn,
  id,
  type
from
  aws_auditmanager_framework
where
  type = 'Custom';

Schema for aws_auditmanager_framework

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
arn	text		The Amazon Resource Name (ARN) of the framework.
compliance_type	text		The compliance type that the new custom framework supports, such as CIS or HIPAA.
control_sets	jsonb		The control sets associated with the framework.
control_sets_count	bigint		The number of control sets associated with the specified framework.
control_sources	text		The sources from which AWS Audit Manager collects evidence for the control.
controls_count	bigint		The number of controls associated with the specified framework.
created_at	timestamp with time zone		Specifies when the framework was created.
created_by	text		The IAM user or role that created the framework.
description	text		The description of the specified framework.
id	text	=	The unique identified for the specified framework.
last_updated_at	timestamp with time zone		Specifies when the framework was most recently updated.
last_updated_by	text		The IAM user or role that most recently updated the framework.
logo	text		The logo associated with the framework.
name	text		The name of the specified framework.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	=	The AWS Region in which the resource is located.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
tags	jsonb		A map of tags for the resource.
title	text		Title of the resource.
type	text		The framework type, such as standard or custom.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_auditmanager_framework