Standards Compliance Audit

Standards Compliance Audit

List standards, then retrieve failing compliance findings.

1. Enumerate the available security standards so the auditor knows which baseline controls are in scope before reviewing compliance findings.
2. Query the findings store for control findings whose compliance status is failing so the auditor can see where the account drifts from the standards.

What you'll need to have ready

• complianceStatus: The compliance status value to filter control findings by.
• severityLabel: The severity label value to further filter the control findings.
• maxResults: The maximum number of findings to return for the audit.

For your developer

Arazzo workflow amazon-security-hub:standards-compliance-audit, 2 operations: DescribeStandards → GetFindings. Specs on APIs.io.