insights_by_assessments

Creates, updates, deletes, gets or lists an insights_by_assessments resource.

Overview

Name	insights_by_assessments
Type	Resource
Id	aws.auditmanager.insights_by_assessments

Fields

The following fields are returned by SELECT queries:

get_insights_by_assessment

Name	Datatype	Description
assessment_controls_count_by_noncompliant_evidence	integer	The number of assessment controls that collected non-compliant evidence on the lastUpdated date.
compliant_evidence_count	integer	The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub CSPM with a Pass ruling, or collected from Config with a Compliant ruling.
inconclusive_evidence_count	integer	The amount of evidence without a compliance check ruling. Evidence is inconclusive if the associated control uses Security Hub CSPM or Config as a data source and you didn't enable those services. This is also the case if a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail). If evidence has a compliance check status of not applicable, it's classified as inconclusive in InsightsByAssessment data.
last_updated	string (date-time)	The time when the assessment insights were last updated.
noncompliant_evidence_count	integer	The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub CSPM with a Fail ruling, or collected from Config with a Non-compliant ruling.
total_assessment_controls_count	integer	The total number of controls in the assessment.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_insights_by_assessment	select	assessment_id, region		Gets the latest analytics data for a specific active assessment.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
assessment_id	string	The unique identifier for the assessment.
region	string	AWS region (default: us-east-1)

SELECT examples

get_insights_by_assessment

Gets the latest analytics data for a specific active assessment.

SELECT
assessment_controls_count_by_noncompliant_evidence,
compliant_evidence_count,
inconclusive_evidence_count,
last_updated,
noncompliant_evidence_count,
total_assessment_controls_count
FROM aws.auditmanager.insights_by_assessments
WHERE assessment_id = '{{ assessment_id }}' -- required
AND region = '{{ region }}' -- required
;