What is AWS Audit Manager?
AWS Audit Manager automates the collection of audit evidence from your AWS environment. The service automatically maps collected data to the controls of a compliance framework and generates audit-ready reports. Instead of manually compiling screenshots and logs, Audit Manager delivers continuously updated evidence.
Availability note: AWS closed Audit Manager to new customers as of April 30, 2026. Existing setups in an account and region can continue to be used and run new assessments; expansion to additional accounts or regions is no longer available. For new compliance automation, AWS recommends alternatives such as Conformance Packs in AWS Config, which currently do not cover all frameworks supported by Audit Manager (e.g., SOC 2, GDPR) with ready-made templates.
The service supports common compliance frameworks such as GDPR, SOC 2, PCI DSS, and ISO 27001. Custom frameworks allow mapping of internal policies and industry-specific requirements.
Core Features
- Automatic Evidence Collection: Continuous capture from CloudTrail, Config, Security Hub, and other AWS services
- Pre-Built Frameworks: Ready-to-use assessments for GDPR, SOC 2, PCI DSS, ISO 27001, and more
- Custom Frameworks: Create your own frameworks with individual controls
- Delegation: Assign controls to departments for decentralized evidence collection
- Assessment Reports: Automatic generation of audit-ready reports with all collected evidence
Typical Use Cases
SOC 2 Audit Preparation: Existing users rely on Audit Manager to continuously collect evidence for SOC 2 Type II audits. Automatic mapping to SOC 2 controls reduces preparation time from weeks to days.
GDPR Compliance: European companies with an existing Audit Manager setup automatically document technical and organizational measures for data protection.
Multi-Framework Compliance: Organizations that need to comply with multiple standards simultaneously use existing Audit Manager assessments to collect evidence once and map it to multiple frameworks.
Benefits
- Drastic reduction of manual effort for audit preparation
- Continuous instead of point-in-time compliance evidence
- Reuse of evidence across multiple frameworks
- Central overview of compliance status for all controls
Integration with innFactory
As an AWS Reseller, innFactory supports you with AWS Audit Manager: assessing whether the service is still the right choice given the closure to new customers, framework selection and customization for existing customers, assessment configuration, and evaluating alternatives such as AWS Config conformance packs.
Typical Use Cases
Frequently Asked Questions
What is AWS Audit Manager?
AWS Audit Manager is a service that continuously collects evidence from your AWS environment to demonstrate compliance with frameworks like GDPR, SOC 2, PCI DSS, and ISO 27001. Evidence is collected automatically from CloudTrail, Config, and Security Hub.
Is AWS Audit Manager still available?
AWS closed Audit Manager to new customers as of April 30, 2026. Existing customers can continue using the service in already configured accounts and regions, including creating new assessments, but setting it up for additional accounts or regions is no longer possible. For new compliance initiatives, AWS points to alternatives such as Conformance Packs in AWS Config.
Which compliance frameworks are supported?
Audit Manager provides pre-built frameworks for SOC 2, PCI DSS, GDPR, HIPAA, ISO 27001, GxP, and more. Custom frameworks can also be created to match specific requirements.
How is evidence collected?
Audit Manager automatically collects evidence from AWS CloudTrail, AWS Config, Security Hub, and other AWS services. Evidence is mapped to the respective controls of a framework and compiled into an assessment report.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of AWS (official documentation). This page does not represent an offer by AWS.