---
title: "GET /insights/control-domains"
method: GET
path: "/insights/control-domains"
---

# GET /insights/control-domains

`GET /insights/control-domains`

Lists the latest analytics data for control domains across all of your active assessments.

A control domain is listed only if at least one of the controls within that domain collected evidence on the `lastUpdated` date of `controlDomainInsights`. If this condition isn’t met, no data is listed for that control domain.

## Query parameters

- `nextToken` string
- `maxResults` integer — Max results in the page.

## Response `200`

Success

- ListControlDomainInsightsResponse
  - `controlDomainInsights` ControlDomainInsights[] — The control domain analytics data that the <code>ListControlDomainInsights</code> API returned.
    - `name` string — The name of the control domain.
    - `id` string — The unique identifier for the control domain.
    - `controlsCountByNoncompliantEvidence` integer — The number of controls in the control domain that collected non-compliant evidence on the <code>lastUpdated</code> date.
    - `totalControlsCount` integer — The total number of controls in the control domain.
    - `evidenceInsights` object — A breakdown of the compliance check status for the evidence that’s associated with the control domain.
      - `noncompliantEvidenceCount` integer — The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a <i>Fail</i> ruling, or collected from Config with a <i>Non-compliant</i> ruling.
      - `compliantEvidenceCount` integer — The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a <i>Pass</i> ruling, or collected from Config with a <i>Compliant</i> ruling.
      - `inconclusiveEvidenceCount` integer — <p>The number of evidence that a compliance check ruling isn't available for. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail). </p> <note> <p>If evidence has a compliance check status of <i>not applicable</i> in the console, it's classified as <i>inconclusive</i> in <code>EvidenceInsights</code> data.</p> </note>
    - `lastUpdated` string, date-time — The time when the control domain insights were last updated.
  - `nextToken` string — The pagination token that's used to fetch the next set of results.

## Other responses

- `480` — ResourceNotFoundException
- `481` — AccessDeniedException
- `482` — InternalServerException
- `483` — ValidationException

---

[API](https://skmtc.net/aws/apis/auditmanager.md) · [All operations](https://skmtc.net/aws/apis/auditmanager/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/auditmanager/versions/27a1388d0f2a/schema)