AWS audit-manager medium security documentation change
Summary
Added documentation about assessment scope conflicts and error resolution
Security assessment
Addresses potential conflicts in security assessments that could lead to inaccurate audit results, specifically preventing overlapping assessments on the same account
Diff
diff --git a/audit-manager/latest/userguide/evidence-collection-issues.md b/audit-manager/latest/userguide/evidence-collection-issues.md index a1b84d23e..04a80cacb 100644 --- a//audit-manager/latest/userguide/evidence-collection-issues.md +++ b//audit-manager/latest/userguide/evidence-collection-issues.md @@ -277 +277,30 @@ A _data source_ is the most granular type of evidence source. A data source incl -If your assessment creation fails, it could be because you selected too many AWS accounts in your assessment scope. If you're using AWS Organizations, Audit Manager can support up to 200 member accounts in the scope of a single assessment. If you exceed this number, the assessment creation will fail. As a workaround, you can run multiple assessments with different accounts in scope for each assessment up to 250 unique member accounts across all assessments. +If your assessment creation fails, this could be due to one of the following issues. + +**You selected too many AWS accounts in your assessment scope** + + +If you're using AWS Organizations, Audit Manager can support up to 200 member accounts in the scope of a single assessment. If you exceed this number, the assessment creation will fail. + +As a workaround, you can run multiple assessments with different accounts in scope for each assessment up to 250 unique member accounts across all assessments. + +**An account in your scope is already being assessed by another active assessment** + + +If you try to create an assessment that includes an account that's already in scope for another active assessment, the assessment creation fails. This can happen when multiple teams or organizations are trying to assess the same account simultaneously. + +You might see an error message similar to: `Scope: AWS Account [account-id] has assessments in progress`. + +To resolve this issue, you can take one of the following actions: + + * **Coordinate with other teams** \- Contact other teams in your organization to determine which assessments are currently using the account in question. You can then coordinate to avoid overlapping assessment scopes. + + * **Modify your assessment scope** \- Remove the conflicting account from your assessment scope and create the assessment with the remaining accounts. You can assess the conflicting account separately once the other assessment is complete. + + * **Wait for the other assessment to complete** \- If the other assessment is temporary or nearing completion, you can wait for it to finish before creating your assessment with the desired scope. + + + + +###### Note + +This restriction helps ensure that evidence collection doesn't conflict between multiple assessments and that audit results remain accurate and consistent.