assessment

Gets an individual assessment resource

Overview

Name	assessment
Type	Resource
Description	assessment
Id	awscc.auditmanager.assessment

Fields

Name	Datatype	Description
framework_id	string
assessment_id	string
aws_account	object
arn	string
tags	array	The tags associated with the assessment.
delegations	array	The list of delegations.
roles	array	The list of roles for the specified assessment.
scope	object
assessment_reports_destination	object
status	string
creation_time	number
name	string
description	string
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
framework_id,
assessment_id,
aws_account,
arn,
tags,
delegations,
roles,
scope,
assessment_reports_destination,
status,
creation_time,
name,
description
FROM awscc.auditmanager.assessment
WHERE data__Identifier = '<AssessmentId>';

Permissions

To operate on the assessment resource, the following permissions are required:

Read

auditmanager:GetAssessment

Update

auditmanager:UpdateAssessment,
auditmanager:UpdateAssessmentStatus,
auditmanager:BatchCreateDelegationByAssessment,
auditmanager:BatchDeleteDelegationByAssessment

Delete

auditmanager:DeleteAssessment