---
title: "POST /associations/batchGet"
method: POST
path: "/associations/batchGet"
---

# POST /associations/batchGet

`POST /associations/batchGet`

For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.

## Request body

- object
  - `StandardsControlAssociationIds` StandardsControlAssociationId[], required — An array with one or more objects that includes a security control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) and the Amazon Resource Name (ARN) of a standard. This field is used to query the enablement status of a control in a specified standard. The security control ID or ARN is the same across standards.
    - `SecurityControlId` string, required — The unique identifier (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) of a security control across standards.
    - `StandardsArn` string, required — The ARN of a standard.

## Response `200`

Success

- BatchGetStandardsControlAssociationsResponse
  - `StandardsControlAssociationDetails` StandardsControlAssociationDetail[], required — Provides the enablement status of a security control in a specified standard and other details for the control in relation to the specified standard.
    - `StandardsArn` string, required — The Amazon Resource Name (ARN) of a security standard.
    - `SecurityControlId` string, required — The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Service name and a number, such as APIGateway.3.
    - `SecurityControlArn` string, required — The ARN of a security control across standards, such as <code>arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1</code>. This parameter doesn't mention a specific standard.
    - `AssociationStatus` 'ENABLED' | 'DISABLED', required — Specifies whether a control is enabled or disabled in a specified standard.
    - `RelatedRequirements` NonEmptyString[] — The requirement that underlies a control in the compliance framework related to the standard.
    - `UpdatedAt` string, date-time — The time at which the enablement status of the control in the specified standard was last updated.
    - `UpdatedReason` string — The reason for updating the enablement status of a control in a specified standard.
    - `StandardsControlTitle` string — The title of a control. This field may reference a specific standard.
    - `StandardsControlDescription` string — The description of a control. This typically summarizes how Security Hub evaluates the control and the conditions under which it produces a failed finding. This parameter may reference a specific standard.
    - `StandardsControlArns` NonEmptyString[] — Provides the input parameter that Security Hub uses to call the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateStandardsControl.html">UpdateStandardsControl</a> API. This API can be used to enable or disable a control in a specified standard.
  - `UnprocessedAssociations` UnprocessedStandardsControlAssociation[] — A security control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) whose enablement status in a specified standard cannot be returned.
    - `StandardsControlAssociationId` object, required — An array with one or more objects that includes a security control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) and the Amazon Resource Name (ARN) of a standard. This parameter shows the specific controls for which the enablement status couldn't be retrieved in specified standards when calling <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html">BatchUpdateStandardsControlAssociations</a>.
      - `SecurityControlId` string, required — The unique identifier (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) of a security control across standards.
      - `StandardsArn` string, required — The ARN of a standard.
    - `ErrorCode` 'INVALID_INPUT' | 'ACCESS_DENIED' | 'NOT_FOUND' | 'LIMIT_EXCEEDED', required — The error code for the unprocessed standard and control association.
    - `ErrorReason` string — The reason why the standard and control association was unprocessed.

## Other responses

- `480` — InternalException
- `481` — LimitExceededException
- `482` — InvalidAccessException
- `483` — InvalidInputException

---

[API](https://skmtc.net/aws/apis/securityhub.md) · [All operations](https://skmtc.net/aws/apis/securityhub/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityhub/versions/72336a39f336/schema)