Changing the status of an assessment to inactive in AWS Audit Manager
When you no longer need to collect evidence for an assessment, you can change the assessment status to Inactive. When the status of an assessment changes to inactive, the assessment stops collecting evidence. As a result, you no longer incur any charges for that assessment.
In addition to stopping evidence collection, Audit Manager makes the following changes to the controls that are within the inactive assessment:
-
All control sets change to Reviewed status.
-
All controls that are Under review change to Reviewed status.
-
Delegates for the inactive assessment can no longer view or edit its controls and control sets.
Prerequisites
The following procedure assumes that you have previously created an assessment, and its current status is active.
Make sure your IAM identity has appropriate permissions to manage an assessment in AWS Audit Manager. Two suggested policies that grant these permissions are AWSAuditManagerAdministratorAccess and Allow users management access to AWS Audit Manager.
Procedure
You can update an assessment status using the Audit Manager console, the Audit Manager API, or the AWS Command Line Interface (AWS CLI).
Warning
This action is irreversible. We recommend that you proceed with caution and make sure that you want to mark your assessment as inactive. When an assessment is inactive, you have read-only access to its contents. This means that you can still review previously collected evidence and generate assessment reports. However, you can’t edit the inactive assessment, add comments, or upload any manual evidence.
Next steps
When you're certain that you no longer need your inactive assessment, you can clean up your Audit Manager environment by deleting the assessment. For instructions, see Deleting an assessment in AWS Audit Manager.