---
title: "GET /standards/controls/{StandardsSubscriptionArn}"
method: GET
path: "/standards/controls/{StandardsSubscriptionArn}"
---

# GET /standards/controls/{StandardsSubscriptionArn}

`GET /standards/controls/{StandardsSubscriptionArn}`

Returns a list of security standards controls.

For each control, the results include information about whether it is currently enabled, the severity, and a link to remediation information.

## Path parameters

- `StandardsSubscriptionArn` string, required

## Query parameters

- `NextToken` string
- `MaxResults` integer

## Response `200`

Success

- DescribeStandardsControlsResponse
  - `Controls` StandardsControl[] — A list of security standards controls.
    - `StandardsControlArn` string — The ARN of the security standard control.
    - `ControlStatus` 'ENABLED' | 'DISABLED' — The current status of the security standard control. Indicates whether the control is enabled or disabled. Security Hub does not check against disabled controls.
    - `DisabledReason` string — The reason provided for the most recent change in status for the control.
    - `ControlStatusUpdatedAt` string, date-time — The date and time that the status of the security standard control was most recently updated.
    - `ControlId` string — The identifier of the security standard control.
    - `Title` string — The title of the security standard control.
    - `Description` string — The longer description of the security standard control. Provides information about what the control is checking for.
    - `RemediationUrl` string — A link to remediation information for the control in the Security Hub user documentation.
    - `SeverityRating` 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' — <p>The severity of findings generated from this security standard control.</p> <p>The finding severity is based on an assessment of how easy it would be to compromise Amazon Web Services resources if the issue is detected.</p>
    - `RelatedRequirements` NonEmptyString[] — The list of requirements that are related to this control.
  - `NextToken` string — The pagination token to use to request the next page of results.

## Other responses

- `480` — InternalException
- `481` — InvalidInputException
- `482` — InvalidAccessException
- `483` — ResourceNotFoundException

---

[API](https://skmtc.net/aws/apis/securityhub.md) · [All operations](https://skmtc.net/aws/apis/securityhub/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityhub/versions/72336a39f336/schema)