---
title: "PATCH /associations"
method: PATCH
path: "/associations"
---

# PATCH /associations

`PATCH /associations`

For a batch of security controls and standards, this operation updates the enablement status of a control in a standard.

## Request body

- object
  - `StandardsControlAssociationUpdates` StandardsControlAssociationUpdate[], required — Updates the enablement status of a security control in a specified standard.
    - `StandardsArn` string, required — The Amazon Resource Name (ARN) of the standard in which you want to update the control's enablement status.
    - `SecurityControlId` string, required — The unique identifier for the security control whose enablement status you want to update.
    - `AssociationStatus` 'ENABLED' | 'DISABLED', required — The desired enablement status of the control in the standard.
    - `UpdatedReason` string — The reason for updating the control's enablement status in the standard.

## Response `200`

Success

- BatchUpdateStandardsControlAssociationsResponse
  - `UnprocessedAssociationUpdates` UnprocessedStandardsControlAssociationUpdate[] — A security control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) whose enablement status in a specified standard couldn't be updated.
    - `StandardsControlAssociationUpdate` object, required — An array of control and standard associations for which an update failed when calling <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html">BatchUpdateStandardsControlAssociations</a>.
      - `StandardsArn` string, required — The Amazon Resource Name (ARN) of the standard in which you want to update the control's enablement status.
      - `SecurityControlId` string, required — The unique identifier for the security control whose enablement status you want to update.
      - `AssociationStatus` 'ENABLED' | 'DISABLED', required — The desired enablement status of the control in the standard.
      - `UpdatedReason` string — The reason for updating the control's enablement status in the standard.
    - `ErrorCode` 'INVALID_INPUT' | 'ACCESS_DENIED' | 'NOT_FOUND' | 'LIMIT_EXCEEDED', required — The error code for the unprocessed update of the control's enablement status in the specified standard.
    - `ErrorReason` string — The reason why a control's enablement status in the specified standard couldn't be updated.

## Other responses

- `480` — InternalException
- `481` — LimitExceededException
- `482` — InvalidAccessException
- `483` — InvalidInputException

---

[API](https://skmtc.net/aws/apis/securityhub.md) · [All operations](https://skmtc.net/aws/apis/securityhub/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityhub/versions/72336a39f336/schema)