Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Preferences
Contact Us
Feedback
AWS Documentation
Create an AWS Account
Compliance - AWS Security Hub
ContentsSee Also

Compliance

PDF

This object typically provides details about a control finding, such as applicable standards and the status of control checks. While finding providers can add custom content in Compliance object fields, they are typically used to review details of Security Hub control findings.

Contents

AssociatedStandards

Typically provides an array of enabled security standards in which a security control is currently enabled.

Type: Array of AssociatedStandard objects

Required: No

RelatedRequirements

Typically provides the industry or regulatory framework requirements that are related to a control. The check for that control is aligned with these requirements.

Array Members: Maximum number of 32 items.

Type: Array of strings

Pattern: .*\S.*

Required: No

SecurityControlId

Typically provides the unique identifier of a control across standards. For Security Hub controls, this field consists of an AWS service and a unique number, such as APIGateway.5.

Type: String

Pattern: .*\S.*

Required: No

SecurityControlParameters

Typically an object that includes security control parameter names and values.

Type: Array of SecurityControlParameter objects

Required: No

Status

Typically summarizes the result of a control check.

For Security Hub controls, valid values for Status are as follows.

    • PASSED - Standards check passed for all evaluated resources.

    • WARNING - Some information is missing or this check is not supported for your configuration.

    • FAILED - Standards check failed for at least one evaluated resource.

    • NOT_AVAILABLE - Check could not be performed due to a service outage, API error, or because the result of the AWS Config evaluation was NOT_APPLICABLE. If the AWS Config evaluation result was NOT_APPLICABLE for a Security Hub control, Security Hub automatically archives the finding after 3 days.

Type: String

Valid Values: PASSED | WARNING | FAILED | NOT_AVAILABLE

Required: No

StatusReasons

Typically used to provide a list of reasons for the value of Status.

Type: Array of StatusReason objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

Need help?

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.