---
title: "POST /assessments/{assessmentId}/controlSets/{controlSetId}/controls/{controlId}/evidence"
method: POST
path: "/assessments/{assessmentId}/controlSets/{controlSetId}/controls/{controlId}/evidence"
---

# POST /assessments/{assessmentId}/controlSets/{controlSetId}/controls/{controlId}/evidence

`POST /assessments/{assessmentId}/controlSets/{controlSetId}/controls/{controlId}/evidence`

Uploads one or more pieces of evidence to a control in an Audit Manager assessment. You can upload manual evidence from any Amazon Simple Storage Service (Amazon S3) bucket by specifying the S3 URI of the evidence.

You must upload manual evidence to your S3 bucket before you can upload it to your assessment. For instructions, see [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html) and [PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) in the _Amazon Simple Storage Service API Reference._

The following restrictions apply to this action:

*   Maximum size of an individual evidence file: 100 MB
    
*   Number of daily manual evidence uploads per control: 100
    
*   Supported file formats: See [Supported file types for manual evidence](https://docs.aws.amazon.com/audit-manager/latest/userguide/upload-evidence.html#supported-manual-evidence-files) in the _Audit Manager User Guide_
    

For more information about Audit Manager service restrictions, see [Quotas and restrictions for Audit Manager](https://docs.aws.amazon.com/audit-manager/latest/userguide/service-quotas.html).

## Path parameters

- `assessmentId` string, required
- `controlSetId` string, required
- `controlId` string, required

## Request body

- object
  - `manualEvidence` ManualEvidence[], required — The list of manual evidence objects.
    - `s3ResourcePath` string — The Amazon S3 URL that points to a manual evidence object.

## Response `200`

Success

- BatchImportEvidenceToAssessmentControlResponse
  - `errors` BatchImportEvidenceToAssessmentControlError[] — A list of errors that the <code>BatchImportEvidenceToAssessmentControl</code> API returned.
    - `manualEvidence` object — Manual evidence that can't be collected automatically by Audit Manager.
      - `s3ResourcePath` string — The Amazon S3 URL that points to a manual evidence object.
    - `errorCode` string — The error code that the <code>BatchImportEvidenceToAssessmentControl</code> API returned.
    - `errorMessage` string — The error message that the <code>BatchImportEvidenceToAssessmentControl</code> API returned.

## Other responses

- `480` — ResourceNotFoundException
- `481` — AccessDeniedException
- `482` — ValidationException
- `483` — InternalServerException

---

[API](https://skmtc.net/aws/apis/auditmanager.md) · [All operations](https://skmtc.net/aws/apis/auditmanager/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/auditmanager/versions/27a1388d0f2a/schema)