# Choosing your report template
A report template defines the information that your report plan includes in your report. When you automate your reports using a *report plan*, AWS Backup Audit Manager provides you reports for the previous 24 hours. AWS Backup Audit Manager creates these reports between the hours of 1 and 5 AM UTC. It offers the following report templates.
## Backup report templates
**Backup report templates**. These templates give you daily updates on your backup, restore, or copy jobs with expanded context including vault properties, backup plan details, and lifecycle settings. You can use these reports to monitor your operational posture, understand backup configurations, and identify any failures that might need further action. The following table lists each backup report template name and its sample output.
| Backup report template | Sample report in JSON format |
| --- | --- |
| BACKUP\$1JOB\$1REPORT | {
"reportItems": [
{
"reportTimePeriodStart": "2021-07-14T00:00:00Z",
"reportTimePeriodEnd": "2021-07-15T00:00:00Z",
"accountId": "112233445566",
"region": "us-west-2",
"backupJobId": "FCCB040A-9426-2A49-2EA9-5EAFFAC656AC",
"jobStatus": "COMPLETED",
"resourceType": "EC2",
"resourceArn": "arn:aws:ec2:us-west-2:112233445566:instance/i-0bc877aee7782ba75",
"resourceName": "MyEC2Instance",
"backupPlanArn": "arn:aws:backup:us-west-2:112233445566:backup-plan:349f2247-b489-4301-83ac-4b7dd724db9a",
"backupRuleId": "ab88bbf8-ff4e-4f1b-92e7-e13d3e65dcfb",
"initiationDate": "2021-07-14T23:53:47.229Z",
"backupPlanName": "MyBackupPlan",
"backupRuleName": "DailyBackups",
"backupRuleSchedule": "cron(0 5 ? * * *)",
"backupRuleTimezone": "UTC",
"startWindowEnd": "2021-07-14T23:53:47.229Z",
"backupOptions": {},
"isParentJob": false,
"parentJobId": null,
"creationDate": "2021-07-14T23:53:47.229Z",
"completionDate": "2021-07-15T00:16:07.282Z",
"recoveryPointArn": "arn:aws:ec2:us-west-2::image/ami-030cafb98e5a6dcdf",
"jobRunTime": "00:22:20",
"backupSizeInBytes": 8589934592,
"backupVaultName": "Default",
"backupVaultArn": "arn:aws:backup:us-west-2:112233445566:backup-vault:Default",
"vaultType": "BACKUP_VAULT",
"vaultLockStatus": "UNLOCKED",
"isEncrypted": true,
"encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/12345678-1234-1234-1234-123456789012",
"deleteAfterDays": 30,
"moveToColdAfterDays": 7,
"enableArchive": false,
"iamRoleArn": "arn:aws:iam::112233445566:role/service-role/AWSBackupDefaultServiceRole"
}
]
} The `vaultType` field is not included in the API response in regions where logically air-gapped vaults are not available. |
| COPY\$1JOB\$1REPORT | {
"reportItems": [
{
"reportTimePeriodStart": "2021-07-14T15:48:31Z",
"reportTimePeriodEnd": "2021-07-15T15:48:31Z",
"accountId": "112233445566",
"region": "us-west-2",
"copyJobId": "E0AD48A9-0560-B668-3EF0-941FDC0AD6B1",
"jobStatus": "RUNNING",
"jobRunTime": "2021-07-16T00:00:00.010Z",
"resourceType": "EC2",
"resourceArn": "arn:aws:ec2:us-west-2:112233445566:instance/i-0bc877aee7782ba75",
"resourceName": "string",
"initiationDate": "2021-07-14T15:48:31Z",
"backupPlanName": "string",
"backupRuleName": "string",
"backupRuleSchedule": "string",
"backupRuleTimezone": "string",
"startWindowEnd": "2021-07-14T15:48:31Z",
"backupOptions": {},
"isParentJob": false,
"parentJobId": null,
"creationDate": "2021-07-15T15:42:04.771Z",
"completionDate": "2021-07-16T00:16:07.282Z",
"backupSizeInBytes": 8589934592,
"sourceRecoveryPointArn": "arn:aws:ec2:us-west-2::image/ami-007b3819f25697299",
"sourceBackupVaultArn": "arn:aws:backup:us-west-2:112233445566:backup-vault:Default",
"destinationRecoveryPointArn": "arn:aws:ec2:us-east-2::image/ami-0eba2199a0bcece3c",
"destinationBackupVaultArn": "arn:aws:backup:us-east-2:112233445566:backup-vault:Default",
"vaultType": "BACKUP_VAULT",
"vaultLockStatus": "string",
"isEncrypted": true,
"encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/...",
"deleteAfterDays": 30,
"moveToColdAfterDays": 7,
"enableArchive": false,
"iamRoleArn": "arn:aws:iam::112233445566:role/service-role/AWSBackupDefaultServiceRole"
}
]
} The `vaultType` field is not included in the API response in regions where logically air-gapped vaults are not available. |
| RESTORE\$1JOB\$1REPORT | {
"reportItems": [
{
"reportTimePeriod": "2021-07-14T15:53:30Z - 2021-07-15T15:53:30Z",
"accountId": "112233445566",
"region": "us-west-2",
"restoreJobId": "4CACA67D-4E12-DC05-6C2B-0E97D01FA41E",
"jobStatus": "RUNNING",
"recoveryPointArn": "arn:aws:ec2:us-west-2::image/ami-00201ecb57a5271ae",
"resourceName": "string",
"initiationDate": "2021-07-14T15:53:30Z",
"backupPlanName": "string",
"backupRuleName": "string",
"backupRuleSchedule": "string",
"backupRuleTimezone": "string",
"startWindowEnd": "2021-07-14T15:53:30Z",
"backupOptions": {},
"isParentJob": false,
"parentJobId": null,
"vaultType": "BACKUP_VAULT",
"vaultLockStatus": "string",
"isEncrypted": true,
"encryptionKeyArn": "arn:aws:kms:us-west-2:112233445566:key/...",
"deleteAfterDays": 30,
"moveToColdAfterDays": 7,
"enableArchive": false,
"sourceResourceArn": "arn:aws:ec2:us-west-2:112233445566:instance/i-0bc877aee7782ba75",
"backupVaultArn": "arn:aws:backup:us-west-2:112233445566:backup-vault:Default",
"creationDate": "2021-07-15T15:52:49.797Z",
"backupSizeInBytes": 8589934592,
"percentDone": "0.00%",
"iamRoleArn": "arn:aws:iam::112233445566:role/service-role/AWSBackupDefaultServiceRole"
}
]
} The `vaultType` field is not included in the API response in regions where logically air-gapped vaults are not available. |
## Compliance report templates
**Compliance report templates** give you daily reports on the compliance of your backup activity and resources against the controls you defined in one or more frameworks. If the compliance status of one of your frameworks is `Non-compliant`, review a compliance report to identify the non-compliant resources.
**Types of compliance report templates**
+ `Control compliance report` helps you track the compliance status of the controls you have defined in your frameworks.
+ `Resource compliance report` helps you track the compliance status of your resources against the controls you defined in your frameworks. These reports include detailed evaluation results, including identifying information on non-compliant resources that you can use to identify and correct those resources.
The following table shows sample output from a compliance report.
| Compliance report template | Sample report in JSON format |
| --- | --- |
| CONTROL\$1COMPLIANCE\$1REPORT | {
"reportItems": [
{
"accountId": "112233445566",
"region": "me-south-1",
"frameworkName": "TestFramework7",
"frameworkDescription": "A test framework",
"controlName": "BACKUP_RESOURCES_PROTECTED_BY_BACKUP_PLAN",
"controlComplianceStatus": "NON_COMPLIANT",
"lastEvaluationTime": "2021-08-17T03:21:56.002Z",
"numResourcesCompliant": 91,
"numResourcesNonCompliant": 205,
"controlFrequency": "Twelve_Hours",
"controlScope": "",
"controlParameters": ""
},
{
"accountId": "112233445566",
"region": "me-south-1",
"frameworkName": "TestFramework7",
"frameworkDescription": "A test framework",
"controlName": "BACKUP_PLAN_MIN_FREQUENCY_AND_MIN_RETENTION_CHECK",
"controlComplianceStatus": "NON_COMPLIANT",
"lastEvaluationTime": "2021-08-17T03:21:19.995Z",
"numResourcesCompliant": 0,
"numResourcesNonCompliant": 25,
"controlScope": "{ComplianceResourceTypes: [],}",
"controlParameters": "{\"requiredFrequencyValue\":\"1\",\"requiredRetentionDays\":\"35\",\"requiredFrequencyUnit\":\"hours\"}"
}
]
} |
| RESOURCE\$1COMPLIANCE\$1REPORT | {
"reportItems": [
{
"accountId": "112233445566",
"region": "us-west-2",
"frameworkName": "MyTestFramework",
"frameworkDescription": "",
"controlName": "BACKUP_LAST_RECOVERY_POINT_CREATED",
"resourceId": "AWS::EFS::FileSystem/fs-63c74e66",
"resourceType": "AWS::EFS::FileSystem",
"resourceComplianceStatus": "NON_COMPLIANT",
"lastEvaluationTime": "2021-07-07T18:55:40.963Z"
},
{
"accountId": "112233445566",
"region": "us-west-2",
"frameworkName": "MyTestFramework",
"frameworkDescription": "",
"controlName": "BACKUP_LAST_RECOVERY_POINT_CREATED",
"resourceId": "AWS::EFS::FileSystem/fs-b3d7c218",
"resourceType": "AWS::EFS::FileSystem",
"resourceComplianceStatus": "NON_COMPLIANT",
"lastEvaluationTime": "2021-07-07T18:55:40.961Z"
}
]
} |
## Scanning report templates
**Scanning report templates**. These templates give you daily updates on your scanning jobs with expanded context including vault properties, and backup plan details. You can use these reports to monitor your scan job statuses, reports, and identify any failures that might need further action. The following table lists a scanning report template name and its sample output.
| Scanning report template | Sample report in JSON format |
| --- | --- |
| MALWARE\$1JOB\$1REPORT | {
"reportTimePeriodStart": "2025-11-09T00:00:00Z",
"reportTimePeriodEnd": "2025-11-10T00:00:00Z",
"accountId": "025066259999",
"region": "us-east-1",
"scanJobId": "489abba3-0a57-4207-93ff-d3947d85a8d3",
"scanId": "9ddd3144f68ea3ee6e388c66a0b55467",
"malwareScanner": "GUARDDUTY",
"jobStatus": "RUNNING",
"scanResultStatus":"",
"statusMessage": "",
"resourceType": "EBS",
"resourceArn": "arn:aws:ec2:us-east-1:025066259999:volume/vol-0f1c480a6a9b33cb7",
"backupPlanArn": "arn:aws:backup:us-east-1:025066259999:backup-plan:orgs/4232272a-ed54-3a88-b1d0-ace894b6c24c",
"creationDate": "2025-10-28T17:30:50.820Z",
"recoveryPointArn": "arn:aws:ec2:us-east-1::snapshot/snap-03fef858bad24c7a6",
"backupVaultName": "Default",
"backupVaultArn": "arn:aws:backup:us-east-1:025066259999:backup-vault:Default",
"iamRoleArn": "arn:aws:iam::025066259999:role/service-role/AWSBackupDefaultServiceRole",
"scannerRoleArn": "arn:aws:iam::025066259999:role/AWSBackupGuardDutyRolePolicyForScans"
} |