Request Syntax URI Request Parameters Request Body Response Syntax Response Elements Errors See Also

BatchImportEvidenceToAssessmentControl

Adds one or more pieces of evidence to a control in an Audit Manager assessment.

You can import manual evidence from any S3 bucket by specifying the S3 URI of the object. You can also upload a file from your browser, or enter plain text in response to a risk assessment question.

The following restrictions apply to this action:

manualEvidence can be only one of the following: evidenceFileName, s3ResourcePath, or textResponse
Maximum size of an individual evidence file: 100 MB
Number of daily manual evidence uploads per control: 100
Supported file formats: See Supported file types for manual evidence in the AWS Audit Manager User Guide

For more information about Audit Manager service restrictions, see Quotas and restrictions for AWS Audit Manager.

Request Syntax


POST /assessments/assessmentId/controlSets/controlSetId/controls/controlId/evidence HTTP/1.1
Content-type: application/json

{
   "manualEvidence": [ 
      { 
         "evidenceFileName": "string",
         "s3ResourcePath": "string",
         "textResponse": "string"
      }
   ]
}

URI Request Parameters

The request uses the following URI parameters.

assessmentId

The identifier for the assessment.

Length Constraints: Fixed length of 36.

Pattern: ^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$

Required: Yes

controlId

The identifier for the control.

Length Constraints: Fixed length of 36.

Pattern: ^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$

Required: Yes

controlSetId

The identifier for the control set.

Length Constraints: Minimum length of 1. Maximum length of 300.

Pattern: ^[\w\W\s\S]*$

Required: Yes

Request Body

The request accepts the following data in JSON format.

manualEvidence

The list of manual evidence objects.

Type: Array of ManualEvidence objects

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Required: Yes

Response Syntax


HTTP/1.1 200
Content-type: application/json

{
   "errors": [ 
      { 
         "errorCode": "string",
         "errorMessage": "string",
         "manualEvidence": { 
            "evidenceFileName": "string",
            "s3ResourcePath": "string",
            "textResponse": "string"
         }
      }
   ]
}

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

errors

A list of errors that the BatchImportEvidenceToAssessmentControl API returned.

Type: Array of BatchImportEvidenceToAssessmentControlError objects

Errors

For information about the errors that are common to all actions, see Common Errors.

AccessDeniedException

Your account isn't registered with AWS Audit Manager. Check the delegated administrator setup on the Audit Manager settings page, and try again.

HTTP Status Code: 403

InternalServerException

An internal service error occurred during the processing of your request. Try again later.

HTTP Status Code: 500

ResourceNotFoundException

The resource that's specified in the request can't be found.

HTTP Status Code: 404

ThrottlingException

The request was denied due to request throttling.

HTTP Status Code: 429

ValidationException

The request has invalid or missing parameters.

HTTP Status Code: 400