All global identifiers for AWS Control Tower controls - AWS Control Tower
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

All global identifiers for AWS Control Tower controls

Warning

The data previously displayed on this page was outdated and has been removed. This page will be removed in a future release.

A global identifier for a control is a unique identifier, independent of the Region in which a control is deployed. Global identifiers are associated with controls that are included in AWS Control Catalog, which is a compendium of controls from several AWS services.

The global identifier fulfills the final portion of the Amazon Resource Name (ARN), which is of the following form:

arn:{PARTITION}:controlcatalog:::control/{CONTROL_CATALOG_OPAQUE_ID}

To obtain the complete global identifier programmatically, with the full ARN, you can call the GetControl and ListControls APIs. You also can view the complete global ARN in the AWS Control Tower console, on the Control details page.

For more information about control identifiers and ARNs, see Resource identifiers for APIs and controls.