Editing a custom framework in AWS Audit Manager
You might need to modify your custom frameworks in AWS Audit Manager as your compliance requirements change.
This page outlines the steps to edit a custom framework's details and control sets.
Prerequisites
The following procedure assumes that you have previously created a custom framework.
Make sure your IAM identity has appropriate permissions to edit a custom framework in AWS Audit Manager. Two suggested policies that grant these permissions are AWSAuditManagerAdministratorAccess and Allow users management access to AWS Audit Manager.
Procedure
Step 1: Edit framework details
Start by reviewing and editing the existing framework details.
To edit framework details
Open the AWS Audit Manager console at https://console.aws.amazon.com/auditmanager/home
. -
In the left navigation pane, choose Framework library and then choose the Custom frameworks tab.
-
Select the framework that you want to edit, choose Actions, and then choose Edit.
-
Alternatively, open a custom framework and choose Edit at the top right of the framework details page.
-
-
Under Framework details, review the name, compliance type, and description for your framework, and make any necessary changes.
-
Choose Next.
Tip
To edit the tags for a framework, open the framework and choose the framework tags tab. There you can view and edit the tags that are associated with the framework.
Step 2: Edit control sets
Next, review and edit the controls and control sets in the framework.
Note
When you use the AWS Audit Manager console to edit a custom framework, you can add up to 10 control sets for each framework.
When you use the Audit Manager API to edit a custom framework, you can add more than 10 control sets. To add more control sets than the console currently allows, use the UpdateAssessmentFramework API that Audit Manager provides.
To edit a control set
-
Under Control set name, review and edit the name for your control set as needed.
-
Under Add controls, use the Control type dropdown list to select one of the two control types: Standard controls or Custom controls.
-
Based on the option you selected in the previous step, a table list of standard controls or custom controls is displayed. Select one or more controls and choose Add to control set.
-
In the pop-up window that appears, choose Add.
-
Review and edit the controls that appear in the Selected controls list.
-
To add more controls, repeat steps 2–4.
-
To remove unwanted controls, select one or more controls and choose Remove from control set.
-
-
To add a new control set to the framework, choose Add control set.
-
To remove an unwanted control set, choose Remove control set.
-
After you finish adding control sets and controls, choose Next.
Step 3. Review and save
Review the information for your framework. To change the information for a step, choose Edit.
When you're finished, choose Save changes.
Next steps
When you're certain that you no longer need a custom framework, you can clean up your Audit Manager environment by deleting the framework. For instructions, see Deleting a custom framework in AWS Audit Manager.
Additional resources
For solutions to framework issues in Audit Manager, see Troubleshooting framework issues.
