AWS Native is in preview. AWS Classic is fully supported.
aws-native.auditmanager.getAssessment
Explore with Pulumi AI
AWS Native is in preview. AWS Classic is fully supported.
An entity that defines the scope of audit evidence collected by AWS Audit Manager.
Using getAssessment
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getAssessment(args: GetAssessmentArgs, opts?: InvokeOptions): Promise<GetAssessmentResult>
function getAssessmentOutput(args: GetAssessmentOutputArgs, opts?: InvokeOptions): Output<GetAssessmentResult>
def get_assessment(assessment_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetAssessmentResult
def get_assessment_output(assessment_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetAssessmentResult]
func LookupAssessment(ctx *Context, args *LookupAssessmentArgs, opts ...InvokeOption) (*LookupAssessmentResult, error)
func LookupAssessmentOutput(ctx *Context, args *LookupAssessmentOutputArgs, opts ...InvokeOption) LookupAssessmentResultOutput
> Note: This function is named LookupAssessment
in the Go SDK.
public static class GetAssessment
{
public static Task<GetAssessmentResult> InvokeAsync(GetAssessmentArgs args, InvokeOptions? opts = null)
public static Output<GetAssessmentResult> Invoke(GetAssessmentInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetAssessmentResult> getAssessment(GetAssessmentArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: aws-native:auditmanager:getAssessment
arguments:
# arguments dictionary
The following arguments are supported:
- Assessment
Id string - The unique identifier for the assessment.
- Assessment
Id string - The unique identifier for the assessment.
- assessment
Id String - The unique identifier for the assessment.
- assessment
Id string - The unique identifier for the assessment.
- assessment_
id str - The unique identifier for the assessment.
- assessment
Id String - The unique identifier for the assessment.
getAssessment Result
The following output properties are available:
- Arn string
- The Amazon Resource Name (ARN) of the assessment.
- Assessment
Id string - The unique identifier for the assessment.
- Assessment
Reports Pulumi.Destination Aws Native. Audit Manager. Outputs. Assessment Reports Destination - The destination that evidence reports are stored in for the assessment.
- Creation
Time double - Specifies when the assessment was created.
- Delegations
List<Pulumi.
Aws Native. Audit Manager. Outputs. Assessment Delegation> - The list of delegations.
- Roles
List<Pulumi.
Aws Native. Audit Manager. Outputs. Assessment Role> - The list of roles for the specified assessment.
- Scope
Pulumi.
Aws Native. Audit Manager. Outputs. Assessment Scope - The wrapper of AWS accounts and services that are in scope for the assessment.
- Status
Pulumi.
Aws Native. Audit Manager. Assessment Status The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- List<Pulumi.
Aws Native. Outputs. Tag> - The tags associated with the assessment.
- Arn string
- The Amazon Resource Name (ARN) of the assessment.
- Assessment
Id string - The unique identifier for the assessment.
- Assessment
Reports AssessmentDestination Reports Destination - The destination that evidence reports are stored in for the assessment.
- Creation
Time float64 - Specifies when the assessment was created.
- Delegations
[]Assessment
Delegation - The list of delegations.
- Roles
[]Assessment
Role - The list of roles for the specified assessment.
- Scope
Assessment
Scope - The wrapper of AWS accounts and services that are in scope for the assessment.
- Status
Assessment
Status The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- Tag
- The tags associated with the assessment.
- arn String
- The Amazon Resource Name (ARN) of the assessment.
- assessment
Id String - The unique identifier for the assessment.
- assessment
Reports AssessmentDestination Reports Destination - The destination that evidence reports are stored in for the assessment.
- creation
Time Double - Specifies when the assessment was created.
- delegations
List<Assessment
Delegation> - The list of delegations.
- roles
List<Assessment
Role> - The list of roles for the specified assessment.
- scope
Assessment
Scope - The wrapper of AWS accounts and services that are in scope for the assessment.
- status
Assessment
Status The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- List<Tag>
- The tags associated with the assessment.
- arn string
- The Amazon Resource Name (ARN) of the assessment.
- assessment
Id string - The unique identifier for the assessment.
- assessment
Reports AssessmentDestination Reports Destination - The destination that evidence reports are stored in for the assessment.
- creation
Time number - Specifies when the assessment was created.
- delegations
Assessment
Delegation[] - The list of delegations.
- roles
Assessment
Role[] - The list of roles for the specified assessment.
- scope
Assessment
Scope - The wrapper of AWS accounts and services that are in scope for the assessment.
- status
Assessment
Status The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- Tag[]
- The tags associated with the assessment.
- arn str
- The Amazon Resource Name (ARN) of the assessment.
- assessment_
id str - The unique identifier for the assessment.
- assessment_
reports_ Assessmentdestination Reports Destination - The destination that evidence reports are stored in for the assessment.
- creation_
time float - Specifies when the assessment was created.
- delegations
Sequence[Assessment
Delegation] - The list of delegations.
- roles
Sequence[Assessment
Role] - The list of roles for the specified assessment.
- scope
Assessment
Scope - The wrapper of AWS accounts and services that are in scope for the assessment.
- status
Assessment
Status The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- Sequence[root_Tag]
- The tags associated with the assessment.
- arn String
- The Amazon Resource Name (ARN) of the assessment.
- assessment
Id String - The unique identifier for the assessment.
- assessment
Reports Property MapDestination - The destination that evidence reports are stored in for the assessment.
- creation
Time Number - Specifies when the assessment was created.
- delegations List<Property Map>
- The list of delegations.
- roles List<Property Map>
- The list of roles for the specified assessment.
- scope Property Map
- The wrapper of AWS accounts and services that are in scope for the assessment.
- status "ACTIVE" | "INACTIVE"
The overall status of the assessment.
When you create a new assessment, the initial
Status
value is alwaysACTIVE
. When you create an assessment, even if you specify the value asINACTIVE
, the value overrides toACTIVE
.After you create an assessment, you can change the value of the
Status
property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status toINACTIVE
.- List<Property Map>
- The tags associated with the assessment.
Supporting Types
AssessmentAwsAccount
- Email
Address string - The email address that's associated with the AWS account .
- Id string
- The identifier for the AWS account .
- Name string
- The name of the AWS account .
- Email
Address string - The email address that's associated with the AWS account .
- Id string
- The identifier for the AWS account .
- Name string
- The name of the AWS account .
- email
Address String - The email address that's associated with the AWS account .
- id String
- The identifier for the AWS account .
- name String
- The name of the AWS account .
- email
Address string - The email address that's associated with the AWS account .
- id string
- The identifier for the AWS account .
- name string
- The name of the AWS account .
- email_
address str - The email address that's associated with the AWS account .
- id str
- The identifier for the AWS account .
- name str
- The name of the AWS account .
- email
Address String - The email address that's associated with the AWS account .
- id String
- The identifier for the AWS account .
- name String
- The name of the AWS account .
AssessmentAwsService
- Service
Name string - The name of the AWS service .
- Service
Name string - The name of the AWS service .
- service
Name String - The name of the AWS service .
- service
Name string - The name of the AWS service .
- service_
name str - The name of the AWS service .
- service
Name String - The name of the AWS service .
AssessmentDelegation
- Assessment
Id string - The identifier for the assessment that's associated with the delegation.
- Assessment
Name string - The name of the assessment that's associated with the delegation.
- Comment string
- The comment that's related to the delegation.
- Control
Set stringId - The identifier for the control set that's associated with the delegation.
- Created
By string The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- Creation
Time double - Specifies when the delegation was created.
- Id string
- The unique identifier for the delegation.
- Last
Updated double - Specifies when the delegation was last updated.
- Role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- Role
Type Pulumi.Aws Native. Audit Manager. Assessment Role Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- Status
Pulumi.
Aws Native. Audit Manager. Assessment Delegation Status - The status of the delegation.
- Assessment
Id string - The identifier for the assessment that's associated with the delegation.
- Assessment
Name string - The name of the assessment that's associated with the delegation.
- Comment string
- The comment that's related to the delegation.
- Control
Set stringId - The identifier for the control set that's associated with the delegation.
- Created
By string The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- Creation
Time float64 - Specifies when the delegation was created.
- Id string
- The unique identifier for the delegation.
- Last
Updated float64 - Specifies when the delegation was last updated.
- Role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- Role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- Status
Assessment
Delegation Status - The status of the delegation.
- assessment
Id String - The identifier for the assessment that's associated with the delegation.
- assessment
Name String - The name of the assessment that's associated with the delegation.
- comment String
- The comment that's related to the delegation.
- control
Set StringId - The identifier for the control set that's associated with the delegation.
- created
By String The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- creation
Time Double - Specifies when the delegation was created.
- id String
- The unique identifier for the delegation.
- last
Updated Double - Specifies when the delegation was last updated.
- role
Arn String - The Amazon Resource Name (ARN) of the IAM role.
- role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- status
Assessment
Delegation Status - The status of the delegation.
- assessment
Id string - The identifier for the assessment that's associated with the delegation.
- assessment
Name string - The name of the assessment that's associated with the delegation.
- comment string
- The comment that's related to the delegation.
- control
Set stringId - The identifier for the control set that's associated with the delegation.
- created
By string The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- creation
Time number - Specifies when the delegation was created.
- id string
- The unique identifier for the delegation.
- last
Updated number - Specifies when the delegation was last updated.
- role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- status
Assessment
Delegation Status - The status of the delegation.
- assessment_
id str - The identifier for the assessment that's associated with the delegation.
- assessment_
name str - The name of the assessment that's associated with the delegation.
- comment str
- The comment that's related to the delegation.
- control_
set_ strid - The identifier for the control set that's associated with the delegation.
- created_
by str The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- creation_
time float - Specifies when the delegation was created.
- id str
- The unique identifier for the delegation.
- last_
updated float - Specifies when the delegation was last updated.
- role_
arn str - The Amazon Resource Name (ARN) of the IAM role.
- role_
type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- status
Assessment
Delegation Status - The status of the delegation.
- assessment
Id String - The identifier for the assessment that's associated with the delegation.
- assessment
Name String - The name of the assessment that's associated with the delegation.
- comment String
- The comment that's related to the delegation.
- control
Set StringId - The identifier for the control set that's associated with the delegation.
- created
By String The user or role that created the delegation.
Minimum :
1
Maximum :
100
Pattern :
^[a-zA-Z0-9-_()\\[\\]\\s]+$
- creation
Time Number - Specifies when the delegation was created.
- id String
- The unique identifier for the delegation.
- last
Updated Number - Specifies when the delegation was last updated.
- role
Arn String - The Amazon Resource Name (ARN) of the IAM role.
- role
Type "PROCESS_OWNER" | "RESOURCE_OWNER" The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.- status "IN_PROGRESS" | "UNDER_REVIEW" | "COMPLETE"
- The status of the delegation.
AssessmentDelegationStatus
AssessmentReportDestinationType
AssessmentReportsDestination
- Destination string
- The destination bucket where Audit Manager stores assessment reports.
- Destination
Type Pulumi.Aws Native. Audit Manager. Assessment Report Destination Type - The destination type, such as Amazon S3.
- Destination string
- The destination bucket where Audit Manager stores assessment reports.
- Destination
Type AssessmentReport Destination Type - The destination type, such as Amazon S3.
- destination String
- The destination bucket where Audit Manager stores assessment reports.
- destination
Type AssessmentReport Destination Type - The destination type, such as Amazon S3.
- destination string
- The destination bucket where Audit Manager stores assessment reports.
- destination
Type AssessmentReport Destination Type - The destination type, such as Amazon S3.
- destination str
- The destination bucket where Audit Manager stores assessment reports.
- destination_
type AssessmentReport Destination Type - The destination type, such as Amazon S3.
- destination String
- The destination bucket where Audit Manager stores assessment reports.
- destination
Type "S3" - The destination type, such as Amazon S3.
AssessmentRole
- Role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- Role
Type Pulumi.Aws Native. Audit Manager. Assessment Role Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
- Role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- Role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
- role
Arn String - The Amazon Resource Name (ARN) of the IAM role.
- role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
- role
Arn string - The Amazon Resource Name (ARN) of the IAM role.
- role
Type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
- role_
arn str - The Amazon Resource Name (ARN) of the IAM role.
- role_
type AssessmentRole Type The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
- role
Arn String - The Amazon Resource Name (ARN) of the IAM role.
- role
Type "PROCESS_OWNER" | "RESOURCE_OWNER" The type of customer persona.
In
CreateAssessment
,roleType
can only bePROCESS_OWNER
.In
UpdateSettings
,roleType
can only bePROCESS_OWNER
.In
BatchCreateDelegationByAssessment
,roleType
can only beRESOURCE_OWNER
.
AssessmentRoleType
AssessmentScope
- Aws
Accounts List<Pulumi.Aws Native. Audit Manager. Inputs. Assessment Aws Account> - The AWS accounts included in scope.
- Aws
Services List<Pulumi.Aws Native. Audit Manager. Inputs. Assessment Aws Service> - The AWS services included in scope.
- Aws
Accounts []AssessmentAws Account - The AWS accounts included in scope.
- Aws
Services []AssessmentAws Service - The AWS services included in scope.
- aws
Accounts List<AssessmentAws Account> - The AWS accounts included in scope.
- aws
Services List<AssessmentAws Service> - The AWS services included in scope.
- aws
Accounts AssessmentAws Account[] - The AWS accounts included in scope.
- aws
Services AssessmentAws Service[] - The AWS services included in scope.
- aws_
accounts Sequence[AssessmentAws Account] - The AWS accounts included in scope.
- aws_
services Sequence[AssessmentAws Service] - The AWS services included in scope.
- aws
Accounts List<Property Map> - The AWS accounts included in scope.
- aws
Services List<Property Map> - The AWS services included in scope.
AssessmentStatus
Tag
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
AWS Native is in preview. AWS Classic is fully supported.