Compliance
Contains finding details that are specific to control-based findings. Only returned for findings generated from controls.
Types
Properties
The enabled security standards in which a security control is currently enabled.
For a control, the industry or regulatory framework requirements that are related to the control. The check for that control is aligned with these requirements.
The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Service and a number, such as APIGateway.5.
An object that includes security control parameter names and values.
The result of a standards check.
For findings generated from controls, a list of reasons behind the value of Status. For the list of status reason codes and their meanings, see Standards-related information in the ASFF in the Security Hub User Guide.