---
title: "GET /securityControls/definitions"
method: GET
path: "/securityControls/definitions"
---

# GET /securityControls/definitions

`GET /securityControls/definitions`

Lists all of the security controls that apply to a specified standard.

## Query parameters

- `StandardsArn` string
- `NextToken` string
- `MaxResults` integer

## Response `200`

Success

- ListSecurityControlDefinitionsResponse
  - `SecurityControlDefinitions` SecurityControlDefinition[], required — An array of controls that apply to the specified standard.
    - `SecurityControlId` string, required — The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Service name and a number (for example, APIGateway.3). This parameter differs from <code>SecurityControlArn</code>, which is a unique Amazon Resource Name (ARN) assigned to a control. The ARN references the security control ID (for example, arn:aws:securityhub:eu-central-1:123456789012:security-control/APIGateway.3).
    - `Title` string, required — The title of a security control.
    - `Description` string, required — The description of a security control across standards. This typically summarizes how Security Hub evaluates the control and the conditions under which it produces a failed finding. This parameter doesn't reference a specific standard.
    - `RemediationUrl` string, required — A link to Security Hub documentation that explains how to remediate a failed finding for a security control.
    - `SeverityRating` 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL', required — The severity of a security control. For more information about how Security Hub determines control severity, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/controls-findings-create-update.html#control-findings-severity">Assigning severity to control findings</a> in the <i>Security Hub User Guide</i>.
    - `CurrentRegionAvailability` 'AVAILABLE' | 'UNAVAILABLE', required — Specifies whether a security control is available in the current Amazon Web Services Region.
  - `NextToken` string — A pagination parameter that's included in the response only if it was included in the request.

## Other responses

- `480` — InternalException
- `481` — InvalidInputException
- `482` — InvalidAccessException
- `483` — LimitExceededException

---

[API](https://skmtc.net/aws/apis/securityhub.md) · [All operations](https://skmtc.net/aws/apis/securityhub/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityhub/versions/72336a39f336/schema)