---
title: "Switch the AWS scan engine for a connection (Comp AI scanners ↔ Security Hub)"
method: PATCH
path: "/v1/cloud-security/connections/{connectionId}/scan-mode"
tags: ["CloudSecurity"]
---

# Switch the AWS scan engine for a connection (Comp AI scanners ↔ Security Hub)

`PATCH /v1/cloud-security/connections/{connectionId}/scan-mode`

Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner.

## Path parameters

- `connectionId` string, required

## Request body

- UpdateAwsScanModeDto
  - `mode` 'comp_scanners' | 'security_hub', required — Which scan engine to use for this AWS connection.

## Response `200`

---

[API](https://skmtc.net/trycompai/apis/comp-ai-api.md) · [All operations](https://skmtc.net/trycompai/apis/comp-ai-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/trycompai/comp-ai-api/revisions/726b9523fb22/schema)