You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -507,6 +528,22 @@ defmodule AWS.AuditManager do
507
528
from Organizations. However, Audit Manager will stop collecting and attaching
508
529
evidence to that delegated administrator account moving forward.
509
530
531
+
Keep in mind the following cleanup task if you use evidence finder:
532
+
533
+
Before you use your management account to remove a delegated administrator, make
534
+
sure that the current delegated administrator account signs in to Audit Manager
535
+
and disables evidence finder first. Disabling evidence finder automatically
536
+
deletes the event data store that was created in their account when they enabled
537
+
evidence finder. If this task isn’t completed, the event data store remains in
538
+
their account. In this case, we recommend that the original delegated
539
+
administrator goes to CloudTrail Lake and manually [deletes the event data store](https://docs.aws.amazon.com/userguide/awscloudtrail/latest/userguide/query-eds-disable-termination.html).
540
+
541
+
This cleanup task is necessary to ensure that you don't end up with multiple
542
+
event data stores. Audit Manager will ignore an unused event data store after
543
+
you remove or change a delegated administrator account. However, the unused
544
+
event data store continues to incur storage costs from CloudTrail Lake if you
545
+
don't delete it.
546
+
510
547
When you deregister a delegated administrator account for Audit Manager, the
511
548
data for that account isn’t deleted. If you want to delete resource data for a
512
549
delegated administrator account, you must perform that task separately before
@@ -516,27 +553,27 @@ defmodule AWS.AuditManager do
516
553
517
554
To delete your Audit Manager resource data, see the following instructions:
518
555
519
-
556
+
*
520
557
[DeleteAssessment](https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessment.html) (see also: [Deleting an
[DeleteAssessmentFramework](https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFramework.html) (see also: [Deleting a custom
[DeleteAssessmentFrameworkShare](https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFrameworkShare.html) (see also: [Deleting a share
[DeleteAssessmentReport](https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentReport.html) (see also: [Deleting an assessment
0 commit comments