find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/aws-security-hub:aws-security-hub-standards-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Aws Security Hub Standards API
  version: '2018-10-26'
  description: 'Operations tagged Standards across 2 of this provider''s published API definitions: aws-security-hub-openapi.yml, aws-security-hub-standards-api-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://securityhub.{region}.amazonaws.com
  description: AWS Security Hub regional endpoint
  variables:
    region:
      default: us-east-1
tags:
- name: Standards
paths:
  /standards:
    get:
      tags:
      - Standards
      operationId: DescribeStandards
      summary: List supported standards
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /standards/register:
    post:
      tags:
      - Standards
      operationId: BatchEnableStandards
      summary: Enable standards
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /standards/deregister:
    post:
      tags:
      - Standards
      operationId: BatchDisableStandards
      summary: Disable standards
      requestBody:
        $ref: '#/components/requestBodies/JsonBody'
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /standards/get:
    get:
      tags:
      - Standards
      operationId: GetEnabledStandards
      summary: Get enabled standards
      responses:
        '200':
          $ref: '#/components/responses/OK'
      security:
      - SigV4: []
    post:
      operationId: postStandardsGet
      summary: Get Enabled Standards
      description: Returns a list of the standards that are currently enabled.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetEnabledStandardsResponse'
              example:
                StandardsSubscriptions:
                - StandardsArn: arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1
                  StandardsInput: {}
                  StandardsStatus: READY
                  StandardsSubscriptionArn: arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1
                  Provider: AWS
        '500':
          description: InternalException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalException'
        '401':
          description: InvalidAccessException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidAccessException'
        '400':
          description: InvalidInputException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '429':
          description: LimitExceededException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/LimitExceededException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetEnabledStandardsRequest'
            example:
              StandardsSubscriptionArns:
              - arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1
      tags:
      - Standards
      security:
      - SigV4: []
      x-operation-id-source: normalized
      x-operation-id-original: GetEnabledStandards
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      description: AWS Security Hub regional endpoint
      variables:
        region:
          default: us-east-1
  /standards/control/{StandardsControlArn+}:
    patch:
      operationId: UpdateStandardsControl
      summary: Update Standards Control
      description: Used to control whether an individual security standard control is enabled or disabled. Calls to this operation return a RESOURCE_NOT_FOUND_EXCEPTION error when the standard subscription for the control has StandardsControlsUpdatable value NOT_READY_FOR_UPDATES.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateStandardsControlResponse'
        '403':
          description: AccessDeniedException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '500':
          description: InternalException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalException'
        '401':
          description: InvalidAccessException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidAccessException'
        '400':
          description: InvalidInputException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '404':
          description: ResourceNotFoundException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceNotFoundException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateStandardsControlRequest'
            example:
              StandardsControlArn: arn:aws:securityhub:us-west-1:123456789012:control/pci-dss/v/3.2.1/PCI.AutoScaling.1
              ControlStatus: DISABLED
              DisabledReason: Not applicable to my service
      tags:
      - Standards
      security:
      - sigv4: []
    servers:
    - url: https://securityhub.{region}.amazonaws.com
      variables:
        region:
          default: us-east-1
components:
  responses:
    OK:
      description: Successful response
      content:
        application/json:
          schema:
            type: object
            additionalProperties: true
  requestBodies:
    JsonBody:
      required: true
      content:
        application/json:
          schema:
            type: object
            additionalProperties: true
  schemas:
    InvalidInputException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    StandardsStatusReason:
      type: object
      properties:
        StatusReasonCode:
          type: string
          enum:
          - NO_AVAILABLE_CONFIGURATION_RECORDER
          - MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED
          - NO_AVAILABLE_MULTICLOUD_CONNECTOR
          - INTERNAL_ERROR
          description: The reason code that represents the reason for the current status of a standard subscription.
      required:
      - StatusReasonCode
    StandardsSubscription:
      type: object
      properties:
        StandardsSubscriptionArn:
          type: string
          description: The ARN of the resource that represents your subscription to the standard.
        StandardsArn:
          type: string
          description: The ARN of the standard.
        StandardsInput:
          type: object
          additionalProperties:
            type: string
          description: A key-value pair of input for the standard.
        StandardsStatus:
          type: string
          enum:
          - PENDING
          - READY
          - FAILED
          - DELETING
          - INCOMPLETE
          description: 'The status of your subscription to the standard. Possible values are: PENDING - The standard is in the process of being enabled. Or the standard is already enabled and Security Hub CSPM is adding new controls to the standard. READY - The standard is enabled. INCOMPLETE - The standard could not be enabled completely. One or more errors (StandardsStatusReason) occurred when Security Hub CSPM attempted to enable the standard. DELETING - The standard is in the process of being disabled. FAILED - The standard could not be disabled. One or more errors (StandardsStatusReason) occurred when Security H'
        StandardsControlsUpdatable:
          type: string
          enum:
          - READY_FOR_UPDATES
          - NOT_READY_FOR_UPDATES
          description: 'Specifies whether you can retrieve information about and configure individual controls that apply to the standard. Possible values are: READY_FOR_UPDATES - Controls in the standard can be retrieved and configured. NOT_READY_FOR_UPDATES - Controls in the standard cannot be retrieved or configured.'
        StandardsStatusReason:
          $ref: '#/components/schemas/StandardsStatusReason'
        Provider:
          type: string
          enum:
          - AWS
          - Azure
          description: The cloud provider whose resources the standard evaluates. For example, AWS or Azure.
      required:
      - StandardsSubscriptionArn
      - StandardsArn
      - StandardsInput
      - StandardsStatus
    UpdateStandardsControlResponse:
      type: object
      properties: {}
    ResourceNotFoundException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    GetEnabledStandardsResponse:
      type: object
      properties:
        StandardsSubscriptions:
          type: array
          items:
            $ref: '#/components/schemas/StandardsSubscription'
          description: The list of StandardsSubscriptions objects that include information about the enabled standards.
        NextToken:
          type: string
          description: The pagination token to use to request the next page of results.
    UpdateStandardsControlRequest:
      type: object
      properties:
        StandardsControlArn:
          type: string
          description: The ARN of the security standard control to enable or disable.
        ControlStatus:
          type: string
          enum:
          - ENABLED
          - DISABLED
          description: The updated status of the security standard control.
        DisabledReason:
          type: string
          description: A description of the reason why you are disabling a security standard control. If you are disabling a control, then this is required.
      required:
      - StandardsControlArn
    GetEnabledStandardsRequest:
      type: object
      properties:
        StandardsSubscriptionArns:
          type: array
          items:
            type: string
          description: The list of the standards subscription ARNs for the standards to retrieve.
        NextToken:
          type: string
          description: The token that is required for pagination. On your first call to the GetEnabledStandards operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response.
        MaxResults:
          type: integer
          description: The maximum number of results to return in the response.
        Providers:
          type: array
          items:
            type: string
            enum:
            - AWS
            - Azure
          description: A list of cloud providers to filter the enabled standards by. For example, specify Azure to return only enabled standards that evaluate Azure resources.
    LimitExceededException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    InternalException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
    InvalidAccessException:
      type: object
      properties:
        Message:
          type: string
        Code:
          type: string
  securitySchemes:
    SigV4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4 signed Authorization header
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: securityhub
x-refined-from:
- aws-security-hub-openapi.yml
- aws-security-hub-standards-api-openapi.yml