--- title: "List governance controls" method: GET path: "/api/v2/governance/control" tags: ["Governance Controls"] --- # List governance controls `GET /api/v2/governance/control` ## Request - Base URL: `https://api.datadoghq.com` - URL: `https://api.datadoghq.com/api/v2/governance/control` - Auth: API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY` Retrieve the list of governance controls configured for the organization. Each control pairs a detection definition with the organization's current detection, notification, and mitigation configuration, along with counts of active and mitigated detections. ## Response `200` OK - GovernanceControlsResponse: A list of governance controls. - `data` GovernanceControlData[], required: An array of governance control resources. - `attributes` GovernanceControlAttributes, required: The attributes of a governance control. - `active_detections_count` integer, required: The number of active detections for the control. - `category` string, required: The value driver the control is grouped under, such as `security` or `cost`. - `created_at` string, date-time, required: The time the control configuration was created. - `created_by` string, required: The UUID of the user who created the control configuration. - `description` string, required: A human-readable description of what the control detects. - `detection_frequency` string, required: How often detections are evaluated for the control. - `detection_parameters` GovernanceControlParametersMap, required: A free-form map of parameter names to their configured values. - `detection_type` string, required: The detection type that uniquely identifies the control. - `feature_flags` string[], required: The feature flags that gate the control. - `insights` string[], required: The insight slugs associated with the control. - `last_detection_at` string, date-time, nullable, required: The time of the most recent detection for the control. `null` when there are no detections. - `mitigated_detections_count` integer, required: The number of mitigated detections for the control. - `mitigation_parameters` GovernanceControlParametersMap, required: A free-form map of parameter names to their configured values. - `mitigation_type` string, required: The configured mitigation type for the control. Empty when not configured. - `mitigations` GovernanceControlMitigationDefinition[], required: The mitigations available for a control. - `action_verb` string, required: The verb describing the mitigation action, such as `revoke` or `delete`. - `description` string, required: A human-readable description of the mitigation. - `execution_modes` string[]: The execution modes the mitigation supports, such as `manual` or `automatic`. - `feature_flags` string[], required: The feature flags that gate the mitigation. - `id` string, required: The unique identifier of the mitigation. - `manual_mitigation_warning` string, required: A warning shown to the user before applying the mitigation manually. - `permissions` string[], required: The permissions required to apply the mitigation. - `requires_ai` boolean, required: Whether the mitigation requires AI to be enabled. - `supported_parameters` GovernanceControlParameterDefinition[], required: An array of parameter definitions. - `default_value` unknown, required - `description` string, required: A human-readable description of the parameter. - `display_name` string, required: The human-readable name of the parameter. - `hidden` boolean, required: Whether the parameter is hidden from the UI. - `name` string, required: The machine-readable name of the parameter. - `required` boolean, required: Whether the parameter must be provided. - `supported_values` GovernanceControlSupportedValue[], required: The supported values for an enumerated parameter. - `label` string, required: The human-readable label for the value. - `value` string, required: The machine-readable value. - `type` string, required: The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`. - `title` string, required: A short, human-readable name for the mitigation. - `name` string, required: Human-readable name of the control. - `next_steps` string, required: Guidance on the next steps to remediate detections for the control. - `notification_frequency` string, required: The configured notification frequency for the control. Empty when not configured. - `notification_parameters` GovernanceControlParametersMap, required: A free-form map of parameter names to their configured values. - `notification_type` string, required: The configured notification type for the control. Empty when not configured. - `priority` string, required: The priority of the control, such as `High`. - `product` string, required: The product the control belongs to. - `release_status` string, required: The release status of the control, such as `prod` or `beta`. - `resource_type` string, required: The type of resource the control evaluates. - `resource_type_display_name` string, required: The human-readable name of the resource type. - `supported_detection_parameters` GovernanceControlParameterDefinition[], required: An array of parameter definitions. - `default_value` unknown, required - `description` string, required: A human-readable description of the parameter. - `display_name` string, required: The human-readable name of the parameter. - `hidden` boolean, required: Whether the parameter is hidden from the UI. - `name` string, required: The machine-readable name of the parameter. - `required` boolean, required: Whether the parameter must be provided. - `supported_values` GovernanceControlSupportedValue[], required: The supported values for an enumerated parameter. - `label` string, required: The human-readable label for the value. - `value` string, required: The machine-readable value. - `type` string, required: The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`. - `supported_notification_parameters` GovernanceControlParameterDefinition[], required: An array of parameter definitions. - `default_value` unknown, required - `description` string, required: A human-readable description of the parameter. - `display_name` string, required: The human-readable name of the parameter. - `hidden` boolean, required: Whether the parameter is hidden from the UI. - `name` string, required: The machine-readable name of the parameter. - `required` boolean, required: Whether the parameter must be provided. - `supported_values` GovernanceControlSupportedValue[], required: The supported values for an enumerated parameter. - `label` string, required: The human-readable label for the value. - `value` string, required: The machine-readable value. - `type` string, required: The type of the parameter, such as `integer`, `string`, `boolean`, `enum`, or `pattern_list`. - `task` string, required: A short description of the remediation task for the control. - `type` string, required: The control type, such as `Proactive` or `Detection`. - `usage_concern` string, required: The usage concern the control addresses, such as `Security` or `Cost Optimization`. - `id` string, required: The unique identifier of the control. - `type` 'governance_control', required: JSON:API resource type for a governance control. ## Other responses - `400`: Bad Request - `401`: Unauthorized - `403`: Forbidden - `429`: Too many requests --- [API](https://skmtc.dev/datadog/apis/datadog-api-v2-collection.md) - [All operations](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/datadog-api-v2-collection/revisions/da68bf029e4c?raw)