---
title: "Get Compliance Controls"
method: GET
path: "/security/v1/compliances/{complianceName}/controls"
tags: ["Compliance"]
---

# Get Compliance Controls

`GET /security/v1/compliances/{complianceName}/controls`

## Request

- Base URL: `https://api.spotinst.io`
- URL: `https://api.spotinst.io/security/v1/compliances/{complianceName}/controls`
- Auth: HTTP bearer

A control is countermeasures to avoid, detect, counteract, or minimize security risks of cloud assets.
A control may be part of one or more compliances. A control is verified in one or more rules.
This API returns the list of controls mapped to a specific compliance.

## Path parameters

- `complianceName` string, required: The name of the cyber security compliance.

## Query parameters

- `isAutomated` boolean: If this is not a manual control, the value is True.

## Parameters

- `#/paths/~1security~1v1~1compliances/get/parameters/0` (unresolved $ref)
- `#/paths/~1security~1v1~1compliances/get/parameters/1` (unresolved $ref)

## Response `200`

Successful Response

- object
  - `error` 0 (unresolved $ref)
  - `request` Request, required (unresolved $ref)
  - `response` object
    - `count` integer: The number of items.
    - `items` object[], required: The array of objects in this response. The length of the array is according to the 'count' attribute.
      - `controlId` string
      - `description` string
      - `isAutomated` boolean
    - `paginationInfo` PaginationInfo, required (unresolved $ref)
    - `status` Status, required (unresolved $ref)
  - `responseTime` number

## Other responses

- `400`: Bad Request
- `404`: Not Found
- `422`: Validation Error

---

[API](https://skmtc.dev/spot/apis/spot-by-flexera-api.md) - [All operations](https://skmtc.dev/spot/apis/spot-by-flexera-api/llms.txt) - [OpenAPI document](https://skmtc.dev/spot/apis/spot-by-flexera-api/revisions/f7e206fa6474?raw)