Lists all of the security controls that apply to a specified standard.
get/securityControls/definitions
Query parameters
StandardsArnstring
The Amazon Resource Name (ARN) of the standard that you want to view controls for.
NextTokenstring
Optional pagination parameter.
MaxResultsinteger
An optional parameter that limits the total results of the API response to the specified number. If this parameter isn't provided in the request, the results include the first 25 security controls that apply to the specified standard. The results also include a <code>NextToken</code> parameter that you can use in a subsequent API call to get the next 25 controls. This repeats until all controls for the standard are returned.
Response
Success
Example response
{
"NextToken": "U2FsdGVkX1...",
"SecurityControlDefinitions": [
{
"CurrentRegionAvailability": "AVAILABLE",
"Description": "This AWS control checks whether ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.",
"RemediationUrl": "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation",
"SecurityControlId": "ACM.1",
"SeverityRating": "MEDIUM",
"Title": "Imported and ACM-issued certificates should be renewed after a specified time period"
},
{
"CurrentRegionAvailability": "AVAILABLE",
"Description": "This control checks whether all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.",
"RemediationUrl": "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation",
"SecurityControlId": "APIGateway.1",
"SeverityRating": "MEDIUM",
"Title": "API Gateway REST and WebSocket API execution logging should be enabled"
},
{
"CurrentRegionAvailability": "AVAILABLE",
"Description": "This control checks whether Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.",
"RemediationUrl": "https://docs.aws.amazon.com/console/securityhub/APIGateway.2/remediation",
"SecurityControlId": "APIGateway.2",
"SeverityRating": "MEDIUM",
"Title": "API Gateway REST API stages should be configured to use SSL certificates for backend authentication"
}
]
}