---
title: "GET /insights/controls#controlDomainId"
method: GET
path: "/insights/controls#controlDomainId"
---

# GET /insights/controls#controlDomainId

`GET /insights/controls#controlDomainId`

Lists the latest analytics data for controls within a specific control domain across all active assessments.

Control insights are listed only if the control belongs to the control domain that was specified and the control collected evidence on the `lastUpdated` date of `controlInsightsMetadata`. If neither of these conditions are met, no data is listed for that control.

## Query parameters

- `controlDomainId` string, required
- `nextToken` string
- `maxResults` integer — Max results in the page.

## Response `200`

Success

- ListControlInsightsByControlDomainResponse
  - `controlInsightsMetadata` ControlInsightsMetadataItem[] — The control analytics data that the <code>ListControlInsightsByControlDomain</code> API returned.
    - `name` string — The name of the control.
    - `id` string — The unique identifier for the control.
    - `evidenceInsights` object — A breakdown of the compliance check status for the evidence that’s associated with the control.
      - `noncompliantEvidenceCount` integer — The number of compliance check evidence that Audit Manager classified as non-compliant. This includes evidence that was collected from Security Hub with a <i>Fail</i> ruling, or collected from Config with a <i>Non-compliant</i> ruling.
      - `compliantEvidenceCount` integer — The number of compliance check evidence that Audit Manager classified as compliant. This includes evidence that was collected from Security Hub with a <i>Pass</i> ruling, or collected from Config with a <i>Compliant</i> ruling.
      - `inconclusiveEvidenceCount` integer — <p>The number of evidence that a compliance check ruling isn't available for. Evidence is inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a control uses a data source that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail). </p> <note> <p>If evidence has a compliance check status of <i>not applicable</i> in the console, it's classified as <i>inconclusive</i> in <code>EvidenceInsights</code> data.</p> </note>
    - `lastUpdated` string, date-time — The time when the control insights were last updated.
  - `nextToken` string — The pagination token that's used to fetch the next set of results.

## Other responses

- `480` — ResourceNotFoundException
- `481` — AccessDeniedException
- `482` — InternalServerException
- `483` — ValidationException

---

[API](https://skmtc.net/aws/apis/auditmanager.md) · [All operations](https://skmtc.net/aws/apis/auditmanager/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/auditmanager/versions/27a1388d0f2a/schema)