---
title: "GET /audit/configuration"
method: GET
path: "/audit/configuration"
---

# GET /audit/configuration

`GET /audit/configuration`

Gets information about the Device Defender audit settings for this account. Settings include how audit notifications are sent and which audit checks are enabled or disabled.

Requires permission to access the [DescribeAccountAuditConfiguration](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Response `200`

Success

- DescribeAccountAuditConfigurationResponse
  - `roleArn` string — <p>The ARN of the role that grants permission to IoT to access information about your devices, policies, certificates, and other items as required when performing an audit.</p> <p>On the first call to <code>UpdateAccountAuditConfiguration</code>, this parameter is required.</p>
  - `auditNotificationTargetConfigurations` object — Information about the targets to which audit notifications are sent for this account.
  - `auditCheckConfigurations` object — Which audit checks are enabled and disabled for this account.

## Other responses

- `480` — ThrottlingException
- `481` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)