Add control to test mapping

Add a control to test mapping.

POST /controls/{controlId}/add-test-to-control

Add control to test mapping

cURL

curl --request POST \
  --url https://api.vanta.com/v1/controls/{controlId}/add-test-to-control \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "testId": "<string>"
}
'

200

{
  "control": {
    "id": "a2f7e1b9d0c3f4e5a6c7b8d9",
    "externalId": "CRY-104",
    "name": "Data encryption utilized",
    "description": "Access reviews are performed to ensure that access is appropriate for the user's role and responsibilities.",
    "source": "Vanta",
    "domains": [
      "CRYPTOGRAPHIC_PROTECTIONS"
    ],
    "owner": {
      "id": "65e1efde08e8478f143a8ff9",
      "emailAddress": "[e-mail]",
      "displayName": "Example Owner"
    },
    "role": "CONTROLLER",
    "customFields": [
      {
        "label": "Additional context",
        "value": "This control is critical for GDPR compliance"
      }
    ],
    "creationDate": null,
    "modificationDate": null
  },
  "test": {
    "id": "aws-account-access-removed-on-termination",
    "name": "AWS accounts deprovisioned when personnel leave",
    "lastTestRunDate": "2024-06-18T20:17:38.463Z",
    "latestFlipDate": null,
    "description": "Verifies that AWS accounts linked to removed users are removed.\n",
    "failureDescription": "Some AWS accounts associated with terminated personnel have not been deactivated.",
    "remediationDescription": "Remove all accounts listed from AWS.\n",
    "version": {
      "major": 0,
      "minor": 0
    },
    "category": "Account security",
    "integrations": [
      "aws"
    ],
    "status": "OK",
    "deactivatedStatusInfo": {
      "isDeactivated": false,
      "deactivatedReason": null,
      "lastUpdatedDate": null
    },
    "remediationStatusInfo": {
      "status": "PASS",
      "soonestRemediateByDate": null,
      "itemCount": 0
    },
    "owner": null
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

controlId · string · required

Body

application/json

testId · string · required

The ID of the test to add to the control.

Response

200 - application/json

Ok

test · object · required

Show child attributes

control · object · required

Show child attributes