---
title: "Attach Files to Control Implementation"
method: POST
path: "/api/controls/v1/control-implementations/{guid}/attachments"
tags: ["Control Implementations"]
---

# Attach Files to Control Implementation

`POST /api/controls/v1/control-implementations/{guid}/attachments`

## Request

- Base URL: `https://hostname`
- URL: `https://hostname/api/controls/v1/control-implementations/{guid}/attachments`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://{hostname}/api/access/v1/oauth/token` scopes: `CONTROL`

Use this API to attach a list of files to a specific control implementation.

> 🗒 Things to Know
> 
> - The files must first be uploaded to the OneTrust application using the [Upload File](https://developer.onetrust.com/onetrust/reference/fileupload) API. The `Id` and `Name` parameter values returned in the [Upload File](https://developer.onetrust.com/onetrust/reference/fileupload) API response are required in the request body for this API.

## Path parameters

- `guid` string, required

## Request body

- TechRiskComplianceITRiskManagementImplementationAttachmentCreateRequest
  - `controlAttachmentRequests` TechRiskComplianceITRiskManagementImplementationAttachmentRequest[], required: List of attachment requests to be associated with the control implementation.
    - `attachmentId` string, uuid, required: Attachment Id.
    - `fileName` string, required: Attachment Description.
    - `fileDescription` string: Attachment Name.
    - `sourceId` string, uuid: The Id of the source from which attachment is inherited.
    - `sourceType` string: The type of the source from which attachment is inherited.
    - `sourceName` string: The name of the source from which attachment is inherited.

## Response `204`

No Content

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `429`: Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500`: Internal Server Error

---

[API](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management.md) - [All operations](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/llms.txt) - [OpenAPI document](https://skmtc.dev/onetrust/apis/tech-risk-compliance-it-risk-management/revisions/d0bfd2a3c53e?raw)