Working with audit reports - AWS Backup

Working with audit reports

AWS Backup Audit Manager reports are automatically generated evidence of your AWS Backup activity, such as:

  • Which backup jobs finished and when

  • Which resources you backed up

There are two types of reports. When you create a report, you choose which type is created.

One type is a jobs report, which shows jobs finished in the last 24 hours and all active jobs. Jobs reports do not display a status of completed with issues. To find this status, you can filter for Completed jobs with one or more status messages. AWS Backup will only include a status message as part of a Completed job's status if the message requires attention or action.

The second type of report is a compliance report. Compliance reports can monitor resource levels or the different controls that are in effect.

AWS Backup Audit Manager delivers a daily report in to your Amazon S3 bucket. If the report is for the current region and current account, you can choose to receive the report in either CSV or JSON format. Otherwise, the report is available in CSV format. The timing of the daily report might fluctuate over several hours because AWS Backup Audit Manager performs randomization to maintain its performance. You can also run an on-demand report anytime.

All account holders can create cross-Region reports; management and delegated administrator account holders can also create cross-account reports.

You can have a maximum of 20 report plans per AWS account.

Note

Resources such as RDS that do not have the capability to show incremental bytes of data of a specific backup will display the value backupSizeInBytes as 0.

To allow AWS Backup Audit Manager to create daily or on-demand reports, you must first create a report plan from a report template.