---
title: "PUT /assessments/{assessmentId}/controlSets/{controlSetId}/status"
method: PUT
path: "/assessments/{assessmentId}/controlSets/{controlSetId}/status"
---

# PUT /assessments/{assessmentId}/controlSets/{controlSetId}/status

`PUT /assessments/{assessmentId}/controlSets/{controlSetId}/status`

Updates the status of a control set in an Audit Manager assessment.

## Path parameters

- `assessmentId` string, required
- `controlSetId` string, required

## Request body

- object
  - `status` 'ACTIVE' | 'UNDER_REVIEW' | 'REVIEWED', required — The status of the control set that's being updated.
  - `comment` string, required — The comment that's related to the status update.

## Response `200`

Success

- UpdateAssessmentControlSetStatusResponse
  - `controlSet` object — The name of the updated control set that the <code>UpdateAssessmentControlSetStatus</code> API returned.
    - `id` string — The identifier of the control set in the assessment. This is the control set name in a plain string format.
    - `description` string — The description for the control set.
    - `status` 'ACTIVE' | 'UNDER_REVIEW' | 'REVIEWED' — The current status of the control set.
    - `roles` Role[] — The roles that are associated with the control set.
      - `roleType` 'PROCESS_OWNER' | 'RESOURCE_OWNER', required — <p> The type of customer persona. </p> <note> <p>In <code>CreateAssessment</code>, <code>roleType</code> can only be <code>PROCESS_OWNER</code>. </p> <p>In <code>UpdateSettings</code>, <code>roleType</code> can only be <code>PROCESS_OWNER</code>.</p> <p>In <code>BatchCreateDelegationByAssessment</code>, <code>roleType</code> can only be <code>RESOURCE_OWNER</code>.</p> </note>
      - `roleArn` string, required — The Amazon Resource Name (ARN) of the IAM role.
    - `controls` AssessmentControl[] — The list of controls that's contained with the control set.
      - `id` string — The identifier for the control.
      - `name` string — The name of the control.
      - `description` string — The description of the control.
      - `status` 'UNDER_REVIEW' | 'REVIEWED' | 'INACTIVE' — The status of the control.
      - `response` 'MANUAL' | 'AUTOMATE' | 'DEFER' | 'IGNORE' — The response of the control.
      - `comments` ControlComment[] — The list of comments that's attached to the control.
        - `authorName` string — The name of the user who authored the comment.
        - `commentBody` string — The body text of a control comment.
        - `postedDate` string, date-time — The time when the comment was posted.
      - `evidenceSources` NonEmptyString[] — The list of data sources for the evidence.
      - `evidenceCount` integer — The amount of evidence that's collected for the control.
      - `assessmentReportEvidenceCount` integer — The amount of evidence in the assessment report.
    - `delegations` Delegation[] — The delegations that are associated with the control set.
      - `id` string — The unique identifier for the delegation.
      - `assessmentName` string — The name of the assessment that's associated with the delegation.
      - `assessmentId` string — The identifier for the assessment that's associated with the delegation.
      - `status` 'IN_PROGRESS' | 'UNDER_REVIEW' | 'COMPLETE' — The status of the delegation.
      - `roleArn` string — The Amazon Resource Name (ARN) of the IAM role.
      - `roleType` 'PROCESS_OWNER' | 'RESOURCE_OWNER' — <p> The type of customer persona. </p> <note> <p>In <code>CreateAssessment</code>, <code>roleType</code> can only be <code>PROCESS_OWNER</code>. </p> <p>In <code>UpdateSettings</code>, <code>roleType</code> can only be <code>PROCESS_OWNER</code>.</p> <p>In <code>BatchCreateDelegationByAssessment</code>, <code>roleType</code> can only be <code>RESOURCE_OWNER</code>.</p> </note>
      - `creationTime` string, date-time — Specifies when the delegation was created.
      - `lastUpdated` string, date-time — Specifies when the delegation was last updated.
      - `controlSetId` string — The identifier for the control set that's associated with the delegation.
      - `comment` string — The comment that's related to the delegation.
      - `createdBy` string — The user or role that created the delegation.
    - `systemEvidenceCount` integer — The total number of evidence objects that are retrieved automatically for the control set.
    - `manualEvidenceCount` integer — The total number of evidence objects that are uploaded manually to the control set.

## Other responses

- `480` — ResourceNotFoundException
- `481` — ValidationException
- `482` — AccessDeniedException
- `483` — InternalServerException

---

[API](https://skmtc.net/aws/apis/auditmanager.md) · [All operations](https://skmtc.net/aws/apis/auditmanager/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/auditmanager/versions/27a1388d0f2a/schema)