Compliance report

The compliance report displays the compliance status of an asset in the specified date range. An asset can be either "In compliance" or "Out of compliance".

An asset is "In compliance" until it falls out of compliance. An asset falls "Out of compliance" when it experiences one or more SecureVault backup (or Snap) failures or the SecureVault backup (or Snap) exceeds the backup window once in the specified date range.

By default, the report (named Default Report) is filtered to display data for the past seven (7) days. Specify a different interval to view the report details over another date range.

The graph displays the number of assets that are in compliance (green) versus out of compliance (red).

Each line in the table is the name of an asset that was affected by a change in compliance.

The table in the Compliance Report has the following columns:

  • Asset: The name of the asset that had a change in compliance status. Click the asset name to drill down to its details, including its protection history.
  • Compliance status: Whether the asset is in compliance with its associated policy. An asset can be in one of two compliance statuses: In compliance or Out of compliance.
    • In compliance (green): The asset has been in compliance with its protection policy (SLAs) for the past 7 days. All of its recurring backups and Snaps generated within the last 7 days have successfully completed. An asset may be out of compliance even if the most recent backup was successful, because a previous backup within 7 days failed.
    • Out of compliance (red): The asset has violated the policy's SLA due to backup or Snap issues encountered in the last 7 days or because there were no successful backups or Snaps since the last attempt. An asset falls out of compliance when it does not meet its policy’s recovery point objective (RPO).
  • Compliance events: The number of successful or unsuccessful backups and the cumulative total of each. Click View Details to see a list of compliance events with the following details.
    • Time: When the last SecureVault backup or Snap attempt was made.
    • Policy: The name of the policy that's protecting the asset.
    • Status: The outcome of the SecureVault backup or Snap attempt. The status can be Successful or Failed.
    • Reason: The reason why the policy failed, if applicable.

Set any of the following filters to narrow down the report data:

  • Asset
  • Asset type
  • Compliance status (In compliance or Out of compliance)

After you have applied filters to customize the report with the data you want to see, you can click Save As to save the filter settings for future reference.

Note that the Compliance Report is different from the compliance details you see in the AWS Protect > Protection Overview panel. The Protection Overview panel displays compliance statuses for all assets discovered by Clumio, while the Compliance Report:

  • Only displays assets that have had a successful compliance event. Assets that have not had a successful compliance event such as ones that are in "Waiting for compliance" status won't be displayed in this report.
  • Only displays assets when they switch to "In compliance" or "Out of compliance" status.