Drata Controls API

openapi: 3.2.0
info:
  title: Drata Controls API
  version: V2
  contact: {}
  description: 'Operations tagged Controls across 2 of this provider''s published API definitions: drata-api-v2-openapi.json, drata-api-v2-openapi.yml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://public-api.drata.com/public/v2
- url: https://public-api.eu.drata.com/public/v2
- url: https://public-api.apac.drata.com/public/v2
tags:
- name: Controls
  description: Controls are a strategic measure or safeguard that an organization puts in place to protect its assets and meet the requirements of specific compliance frameworks.
paths:
  /workspaces/{workspaceId}/controls:
    get:
      description: 'Find Controls matching the provided filters.


        🔒 Requires **Controls: List Controls** permission.'
      operationId: ControlsPublicV2Controller_getControls
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: cursor
        required: false
        in: query
        description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results
        schema:
          type: string
      - name: size
        required: false
        in: query
        description: Number of results to return
        schema:
          minimum: 1
          maximum: 500
          default: 50
          type: number
      - name: sort
        required: false
        in: query
        description: Which field to sort by
        schema:
          $ref: '#/components/schemas/SortTypeLimitedEnum'
      - name: sortDir
        required: false
        in: query
        description: The direction to sort the data
        schema:
          $ref: '#/components/schemas/SortDirectionEnum'
      - name: includeTotalCount
        required: false
        in: query
        description: Include total count of all matching records in response. Only honored on first page (when cursor is null).
        schema:
          default: false
          example: false
          type: boolean
      - name: expand[]
        required: false
        in: query
        description: List of subcollections and sub-objects to expand
        schema:
          type: array
          items:
            $ref: '#/components/schemas/ControlsExpandEnum'
      - name: isMonitored
        required: false
        in: query
        description: Filter Controls that have or do not have a Monitor
        schema:
          example: false
          type: boolean
      - name: isReady
        required: false
        in: query
        description: Filter Controls that are or are not ready
        schema:
          example: false
          type: boolean
      - name: hasEvidence
        required: false
        in: query
        description: Filter to Controls with or without Evidence
        schema:
          example: true
          type: boolean
      - name: hasPolicy
        required: false
        in: query
        description: Filter to Controls with or without Policy
        schema:
          example: true
          type: boolean
      - name: hasPassingTest
        required: false
        in: query
        description: Filter to Controls with at least one passing Test
        schema:
          example: true
          type: boolean
      - name: ticketStatus
        required: false
        in: query
        description: Only include Controls with an associated Task Management Ticket
        schema:
          example: 0
          enum:
          - IN_PROGRESS
          - ARCHIVED
          type: string
      - name: policyId
        required: false
        in: query
        description: Filter Controls associated with a specific Policy ID
        schema:
          example: 123
          type: number
      - name: isEnabled
        required: false
        in: query
        description: Filter Controls that are or are not enabled
        schema:
          example: true
          type: boolean
      - name: isArchived
        required: false
        in: query
        description: Filter Controls that are or are not archived
        schema:
          example: false
          type: boolean
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlsResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: List Controls
      tags:
      - Controls
      x-drata-permissions:
      - controls-get
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    post:
      description: 'Create a new custom Control


        🔒 Requires **Controls: Create Control** permission.'
      operationId: ControlsPublicV2Controller_createControl
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/ControlCreateRequestPublicV2Dto'
          application/json:
            schema:
              $ref: '#/components/schemas/ControlCreateRequestPublicV2Dto'
      responses:
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '413':
          description: The file was too large to upload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '503':
          description: Third party system was unavailable
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
      security:
      - bearer: []
      summary: Create Control
      tags:
      - Controls
      x-drata-permissions:
      - controls-post
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /workspaces/{workspaceId}/controls/{controlId}:
    get:
      description: 'Get all the information for a specific Control


        🔒 Requires **Controls: Get Control** permission.'
      operationId: ControlsPublicV2Controller_getControlById
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: cursor
        required: false
        in: query
        description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results
        schema:
          type: string
      - name: size
        required: false
        in: query
        description: Number of results to return
        schema:
          minimum: 1
          maximum: 500
          default: 50
          type: number
      - name: sort
        required: false
        in: query
        description: Which field to sort by
        schema:
          $ref: '#/components/schemas/SortTypeLimitedEnum'
      - name: sortDir
        required: false
        in: query
        description: The direction to sort the data
        schema:
          $ref: '#/components/schemas/SortDirectionEnum'
      - name: expand[]
        required: false
        in: query
        description: List of subcollections and sub-objects to expand
        schema:
          type: array
          items:
            $ref: '#/components/schemas/ControlExpandEnum'
      - name: controlId
        required: true
        in: path
        description: An integer control ID or a control code prefixed with `code:`
        schema:
          oneOf:
          - type: number
            description: Integer control ID
          - type: string
            description: Control code prefixed with 'code:', e.g. `code:DCF-37`
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Get Control
      tags:
      - Controls
      x-drata-permissions:
      - controls-get-control
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    put:
      operationId: ControlsPublicV2Controller_modifyControl
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: controlId
        required: true
        in: path
        description: An integer control ID or a control code prefixed with `code:`
        schema:
          oneOf:
          - type: number
            description: Integer control ID
          - type: string
            description: Control code prefixed with 'code:', e.g. `code:DCF-37`
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ControlModifyRequestPublicV2Dto'
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Modify Control
      tags:
      - Controls
      x-drata-permissions:
      - controls-put
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
      description: '🔒 Requires **Controls: Update Control** permission.'
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /workspaces/{workspaceId}/controls/{controlId}/requirements:
    get:
      description: 'Find Control Requirements matching the provided filters.


        🔒 Requires **Controls: Get Control** permission.'
      operationId: ControlsPublicV2Controller_getMappedRequirements
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: controlId
        required: true
        in: path
        schema:
          type: number
      - name: cursor
        required: false
        in: query
        description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results
        schema:
          type: string
      - name: size
        required: false
        in: query
        description: Number of results to return
        schema:
          minimum: 1
          maximum: 500
          default: 50
          type: number
      - name: sort
        required: false
        in: query
        description: Which field to sort by
        schema:
          $ref: '#/components/schemas/SortTypeLimitedEnum'
      - name: sortDir
        required: false
        in: query
        description: The direction to sort the data
        schema:
          $ref: '#/components/schemas/SortDirectionEnum'
      - name: includeTotalCount
        required: false
        in: query
        description: Include total count of all matching records in response. Only honored on first page (when cursor is null).
        schema:
          default: false
          example: false
          type: boolean
      - name: frameworkTag
        required: false
        in: query
        description: Filter data by controls associated with these framework tags
        schema:
          example:
          - SOC_2
          - ISO27001
          type: array
          items:
            type: string
            enum:
            - NONE
            - SOC_2
            - ISO27001
            - CCPA
            - GDPR
            - HIPAA
            - PCI
            - SCF
            - NIST80053
            - NISTCSF
            - CMMC
            - NIST800171
            - MSSSPA
            - FFIEC
            - ISO27701
            - COBIT
            - SOX_ITGC
            - ISO270012022
            - CCM
            - CYBER_ESSENTIALS
            - ISO270172015
            - ISO270182019
            - FEDRAMP
            - NISTAI
            - PCI4
            - NISTCSF2
            - NIS2
            - DORA
            - ISO420012023
            - DRATA_ESSENTIALS
            - NIST800171R3
            - CIS8
            - CYBER_ESSENTIALS_32
            - FEDRAMP20X
            - HITRUST
            - MSSSPA11
            - ESSENTIAL_EIGHT
            - NYDFS
            - TISAX
            - ISO270182025
            - CCPA2026
            - ISO277012025
            - CPS230
            - CYFUN
            - AIUC_1
            - CUSTOM
            - ALL
      - name: excludeIds
        required: false
        in: query
        description: Exclude requirements by array of IDs
        schema:
          example: []
          type: array
          items:
            type: number
      - name: frameworkSlug
        required: false
        in: query
        description: Filter data by controls associated with these framework slugs. This parameter is intended to be used only for custom frameworks
        schema:
          example: slug
          type: string
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlRequirementsResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: List Requirements for Control
      tags:
      - Controls
      x-drata-permissions:
      - controls-get-control
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /workspaces/{workspaceId}/controls/action-reset-mappings:
    post:
      description: 'Reset multiple controls to their original requirement mappings from control templates. Custom controls cannot be reset. Returns success/failure status for each control.


        🔒 Requires **Controls: Create Control** permission.'
      operationId: ControlsPublicV2Controller_resetControlRequirementMappings
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ControlsResetMappingsRequestPublicV2Dto'
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlsResetMappingsResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Reset Control Requirement Mappings
      tags:
      - Controls
      x-drata-permissions:
      - controls-post
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /workspaces/{workspaceId}/controls/{controlId}/actions:
    post:
      description: 'Perform an action on a Control: `markOutOfScope` archives it, `markInScope` restores it. Returns 204 with no body when the action is already in the desired state.


        🔒 Requires **Controls: Update Control** permission.'
      operationId: ControlsPublicV2Controller_performControlAction
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: controlId
        required: true
        in: path
        description: The Control ID
        schema:
          example: 123
          type: number
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ControlActionRequestPublicV2Dto'
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlResponsePublicV2Dto'
        '204':
          description: Control is already in the requested state; no change was made.
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Perform Control Action
      tags:
      - Controls
      x-drata-permissions:
      - controls-put
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
  /workspaces/{workspaceId}/controls-requirement-comparison:
    get:
      description: 'Compare requirements for multiple controls between tenant mappings and global template mappings.


        🔒 Requires **Controls: Get Control** permission.'
      operationId: ControlsPublicV2Controller_compareControlRequirements
      parameters:
      - name: workspaceId
        required: true
        in: path
        description: The Workspace ID associated to the Account
        schema:
          type: number
      - name: controlIds[]
        required: true
        in: query
        description: Array of Control IDs to compare requirements for
        schema:
          minItems: 1
          maxItems: 300
          example:
          - 1
          - 2
          - 3
          type: array
          items:
            type: number
      responses:
        '200':
          description: Successful
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ControlsRequirementComparisonResponsePublicV2Dto'
        '400':
          description: Malformed data and/or validation errors
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '401':
          description: Invalid Authorization
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '403':
          description: You are not allowed to perform this action
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponsePublicV2Dto'
        '412':
          description: You must accept the Drata terms and conditions to use the API
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ExceptionResponseDto'
      security:
      - bearer: []
      summary: Compare Control Requirements
      tags:
      - Controls
      x-drata-permissions:
      - controls-get-control
      x-product-area:
      - REQUIREMENTS_FRAMEWORKS
    servers:
    - url: https://public-api.drata.com/public/v2
    - url: https://public-api.eu.drata.com/public/v2
    - url: https://public-api.apac.drata.com/public/v2
components:
  schemas:
    ControlsResetMappingsResponsePublicV2Dto:
      type: object
      properties:
        results:
          description: Results for each control reset operation
          type: array
          items:
            $ref: '#/components/schemas/ControlResetResultPublicV2Dto'
      required:
      - results
    ControlsRequirementComparisonResponsePublicV2Dto:
      type: object
      properties:
        data:
          description: Array of control requirement comparisons
          type: array
          items:
            $ref: '#/components/schemas/ControlRequirementComparisonResponsePublicV2Dto'
      required:
      - data
    ControlFlagsResponsePublicV2Dto:
      type: object
      properties:
        hasEvidence:
          type:
          - boolean
          - 'null'
          example: true
          description: Indicates if the Control has any linked Polices, Reports, External Evidence, or Control Tests
        hasPolicy:
          type:
          - boolean
          - 'null'
          example: true
          description: Indicates if the Control has any linked Polices
        isReady:
          type:
          - boolean
          - 'null'
          example: 'true'
          description: Indicates if the Control is ready
        hasTicket:
          type:
          - boolean
          - 'null'
          example: 'true'
          description: Indicates if the Control is associated with a Task Management Ticket
        hasOwner:
          type: boolean
          example: false
          description: Indicates if the Control has any Owners
        isMonitored:
          type: boolean
          example: false
          description: Indicates if the Control has a Test
      required:
      - hasEvidence
      - hasPolicy
      - isReady
      - hasTicket
      - hasOwner
      - isMonitored
    ControlResetResultPublicV2Dto:
      type: object
      properties:
        controlId:
          type: number
          description: Control ID
          example: 123
        success:
          type: boolean
          description: Whether the reset was successful
          example: true
        error:
          type:
          - string
          - 'null'
          description: Error message if reset failed
          example: Cannot reset requirement mappings for Custom Control
      required:
      - controlId
      - success
    ShortRequirementResponsePublicV2Dto:
      type: object
      properties:
        id:
          type: number
          example: 123
          description: Requirement ID
        name:
          type: string
          example: CC1.1
          description: Requirement name
        description:
          type: string
          example: The entity demonstrates a commitment to integrity and ethical values.
          description: Requirement description
        frameworkTag:
          type: string
          example: SOC_2
          description: The framework tag this requirement is associated with
        isOutOfScope:
          type: boolean
          example: false
          description: Whether the requirement is marked as out of scope
      required:
      - id
      - name
      - description
      - frameworkTag
      - isOutOfScope
    ControlActionEnum:
      type: string
      enum:
      - markInScope
      - markOutOfScope
    ExceptionResponseDto:
      type: object
      properties:
        statusCode:
          type: number
        message:
          type: string
        code:
          type: number
        debugInfo:
          type: object
          properties:
            name:
              type: string
            message:
              type: stri

# --- truncated at 32 KB (55 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/drata/refs/heads/main/openapi/drata-controls-api-openapi.yml