Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.
Query parameters
The identifier of the control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) that you want to determine the enablement status of in each enabled standard.
Optional pagination parameter.
An optional parameter that limits the total results of the API response to the specified number. If this parameter isn't provided in the request, the results include the first 25 standard and control associations. The results also include a <code>NextToken</code> parameter that you can use in a subsequent API call to get the next 25 associations. This repeats until all associations for the specified control are returned. The number of results is limited by the number of supported Security Hub standards that you've enabled in the calling account.
Response
Success
Example response
{
"StandardsControlAssociationSummaries": [
{
"AssociationStatus": "ENABLED",
"RelatedRequirements": [
"PCI DSS 1.2.1",
"PCI DSS 1.3.1",
"PCI DSS 1.3.2",
"PCI DSS 1.3.4",
"PCI DSS 1.3.6"
],
"SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
"SecurityControlId": "S3.1",
"StandardsArn": "arn:aws:securityhub:us-west-2::standards/pci-dss/v/3.2.1",
"StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
"StandardsControlTitle": "S3 Block Public Access setting should be enabled",
"UpdatedAt": "2022-01-13T23:03:46.648000+00:00"
},
{
"AssociationStatus": "DISABLED",
"RelatedRequirements": [],
"SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
"SecurityControlId": "S3.1",
"StandardsArn": "arn:aws:securityhub:us-west-2::standards/aws-foundational-security-best-practices/v/1.0.0",
"StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
"StandardsControlTitle": "S3 Block Public Access setting should be enabled",
"UpdatedAt": "2022-08-12T22:59:04.924000+00:00",
"UpdatedReason": "Not relevant to environment"
}
]
}