---
title: "Get Rules"
method: GET
path: "/security/v1/misconfigurations/rules"
tags: ["Misconfiguration"]
---

# Get Rules

`GET /security/v1/misconfigurations/rules`

Rules are configuration checks that detect misconfigurations in your cloud environment.
Rules are cloud service provider specific. A rule is mapped to one or more controls.
This API returns the list of rules that can determine the state of a specific control.

## Query parameters

- `complianceName` string — The name of the cyber security compliance.
- `controlId` string — The ID of the control defined in the compliance.

## Parameters

- `#/paths/~1security~1v1~1misconfigurations/get/parameters/0` — unresolved $ref
- `#/paths/~1security~1v1~1misconfigurations/get/parameters/8` — unresolved $ref
- `#/paths/~1security~1v1~1compliances/get/parameters/0` — unresolved $ref
- `#/paths/~1security~1v1~1compliances/get/parameters/1` — unresolved $ref

## Response `200`

Successful Response

- object
  - `error` 0 — unresolved $ref
  - `request` Request, required — unresolved $ref
  - `response` object
    - `count` integer — The number of items.
    - `items` object[], required — The array of objects in this response. The length of the array is according to the 'count' attribute.
      - `args` string[], required — Certain misconfiguration rules have arguments. This field contains the arguments in the form of an comma separated array. Example: ["MongoDB", "TCP", "27017"]
      - `cloud` string, required — The name of the cloud.
      - `complianceName` string[], required — The name of the cyber security compliance.
      - `controls` object[], required — The ID of the control defined in the compliance.
      - `description` string, required — Description of the rule.
      - `effort` 'High' | 'Medium' | 'Low' | '', required — The effort required to fix the finding.
      - `ruleName` string, required — The unique name of the rule.
      - `ruleTitle` string, required — The name of the rule.
      - `service` string, required — The cloud service.
      - `severity` 'Critical' | 'High' | 'Medium' | 'Low', required — The severity of the rule.
    - `paginationInfo` PaginationInfo, required — unresolved $ref
    - `status` Status, required — unresolved $ref
  - `responseTime` number

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `422` — Validation Error

---

[API](https://skmtc.net/spot/apis/spot-by-flexera-api.md) · [All operations](https://skmtc.net/spot/apis/spot-by-flexera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/spot/spot-by-flexera-api/revisions/72813baf8d47/schema)