---
title: "List governance controls"
method: GET
path: "/api/v2/governance/control"
tags: ["Governance Controls"]
---

# List governance controls

`GET /api/v2/governance/control`

Retrieve the list of governance controls configured for the organization. Each control pairs a
detection definition with the organization's current detection, notification, and mitigation
configuration, along with counts of active and mitigated detections.

## Response `200`

OK

- GovernanceControlsResponse — A list of governance controls.
  - `data` GovernanceControlData[], required — An array of governance control resources.
    - `attributes` GovernanceControlAttributes, required — The attributes of a governance control.
      - `active_detections_count` integer, required — The number of active detections for the control.
      - `category` string, required — The value driver the control is grouped under, such as `security` or `cost`.
      - `created_at` string, date-time, required — The time the control configuration was created.
      - `created_by` string, required — The UUID of the user who created the control configuration.
      - `description` string, required — A human-readable description of what the control detects.
      - `detection_frequency` string, required — How often detections are evaluated for the control.
      - `detection_parameters` GovernanceControlParametersMap, required — A free-form map of parameter names to their configured values.
      - `detection_type` string, required — The detection type that uniquely identifies the control.
      - `feature_flags` string[], required — The feature flags that gate the control.
      - `insights` string[], required — The insight slugs associated with the control.
      - `last_detection_at` string, date-time, nullable, required — The time of the most recent detection for the control. `null` when there are no detections.
      - `mitigated_detections_count` integer, required — The number of mitigated detections for the control.
      - `mitigation_parameters` GovernanceControlParametersMap, required — A free-form map of parameter names to their configured values.
      - `mitigation_type` string, required — The configured mitigation type for the control. Empty when not configured.
      - `mitigations` GovernanceControlMitigationDefinition[], required — The mitigations available for a control.
        - `action_verb` string, required — The verb describing the mitigation action, such as `revoke` or `delete`.
        - `description` string, required — A human-readable description of the mitigation.
        - `execution_modes` string[] — The execution modes the mitigation supports, such as `manual` or `automatic`.
        - `feature_flags` string[], required — The feature flags that gate the mitigation.
        - `id` string, required — The unique identifier of the mitigation.
        - `manual_mitigation_warning` string, required — A warning shown to the user before applying the mitigation manually.
        - `permissions` string[], required — The permissions required to apply the mitigation.
        - `requires_ai` boolean, required — Whether the mitigation requires AI to be enabled.
        - `supported_parameters` GovernanceControlParameterDefinition[], required — An array of parameter definitions.
          - `default_value` unknown, required
          - `description` string, required — A human-readable description of the parameter.
          - `display_name` string, required — The human-readable name of the parameter.
          - `hidden` boolean, required — Whether the parameter is hidden from the UI.
          - `name` string, required — The machine-readable name of the parameter.
          - `required` boolean, required — Whether the parameter must be provided.
          - `supported_values` GovernanceControlSupportedValue[], required — The supported values for an enumerated parameter.
            - `label` string, required — The human-readable label for the value.
            - `value` string, required — The machine-readable value.
          - `type` string, required — The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`.
        - `title` string, required — A short, human-readable name for the mitigation.
      - `name` string, required — Human-readable name of the control.
      - `next_steps` string, required — Guidance on the next steps to remediate detections for the control.
      - `notification_frequency` string, required — The configured notification frequency for the control. Empty when not configured.
      - `notification_parameters` GovernanceControlParametersMap, required — A free-form map of parameter names to their configured values.
      - `notification_type` string, required — The configured notification type for the control. Empty when not configured.
      - `priority` string, required — The priority of the control, such as `High`.
      - `product` string, required — The product the control belongs to.
      - `release_status` string, required — The release status of the control, such as `prod` or `beta`.
      - `resource_type` string, required — The type of resource the control evaluates.
      - `resource_type_display_name` string, required — The human-readable name of the resource type.
      - `supported_detection_parameters` GovernanceControlParameterDefinition[], required — An array of parameter definitions.
        - `default_value` unknown, required
        - `description` string, required — A human-readable description of the parameter.
        - `display_name` string, required — The human-readable name of the parameter.
        - `hidden` boolean, required — Whether the parameter is hidden from the UI.
        - `name` string, required — The machine-readable name of the parameter.
        - `required` boolean, required — Whether the parameter must be provided.
        - `supported_values` GovernanceControlSupportedValue[], required — The supported values for an enumerated parameter.
          - `label` string, required — The human-readable label for the value.
          - `value` string, required — The machine-readable value.
        - `type` string, required — The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`.
      - `supported_notification_parameters` GovernanceControlParameterDefinition[], required — An array of parameter definitions.
        - `default_value` unknown, required
        - `description` string, required — A human-readable description of the parameter.
        - `display_name` string, required — The human-readable name of the parameter.
        - `hidden` boolean, required — Whether the parameter is hidden from the UI.
        - `name` string, required — The machine-readable name of the parameter.
        - `required` boolean, required — Whether the parameter must be provided.
        - `supported_values` GovernanceControlSupportedValue[], required — The supported values for an enumerated parameter.
          - `label` string, required — The human-readable label for the value.
          - `value` string, required — The machine-readable value.
        - `type` string, required — The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`.
      - `task` string, required — A short description of the remediation task for the control.
      - `type` string, required — The control type, such as `Proactive` or `Detection`.
      - `usage_concern` string, required — The usage concern the control addresses, such as `Security` or `Cost Optimization`.
    - `id` string, required — The unique identifier of the control.
    - `type` 'governance_control', required — JSON:API resource type for a governance control.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too many requests

---

[API](https://skmtc.net/datadog/apis/api-v2.md) · [All operations](https://skmtc.net/datadog/apis/api-v2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/datadog/api-v2/revisions/da68bf029e4c/schema)