Skip to main content
POST
Compliance Requirements
Get compliance requirements for infrastructure resources (PCI-DSS, HIPAA, CIS, SOC2, NIST, ISO 27001)
Base URL: https://api.wistx.ai
The API playground will use this base URL by default. You can switch to http://localhost:8000 for local development using the server selector above.

Endpoint

Authorization

string
required
Bearer token for API authentication. Format: Bearer YOUR_API_KEY

Request Body

array[string]
required
List of resource types to check compliance for. Examples: RDS, S3, EC2, Lambda, EKS, GKE, AKS, etc.Minimum: 1 item
Maximum: 50 items
array[string]
Compliance standards to check. Supported standards:
  • PCI-DSS - Payment Card Industry Data Security Standard
  • HIPAA - Health Insurance Portability and Accountability Act
  • CIS - Center for Internet Security Benchmarks
  • SOC2 - Service Organization Control 2
  • NIST-800-53 - NIST Cybersecurity Framework
  • ISO-27001 - ISO/IEC 27001 Information Security Management
  • GDPR - General Data Protection Regulation
  • FedRAMP - Federal Risk and Authorization Management Program
Default: [] (all standards)
Maximum: 20 items
string
Filter results by severity level.Options: CRITICAL, HIGH, MEDIUM, LOW
Default: null (all severities)
boolean
Include remediation guidance and code snippets in the response.Default: true
boolean
Include verification procedures in the response.Default: true

Response

Response Fields

object
required
Response data containing compliance controls and summary.
object
required
Response metadata including request ID and timestamp.

Examples

Get PCI-DSS Requirements for RDS

Get Critical HIPAA Controls for S3

Rate Limits

  • Professional Plan: 2,000 queries/month
  • Team Plan: 10,000 queries/month
  • Enterprise Plan: Unlimited queries/month
Rate limit information is included in response headers:
  • X-RateLimit-Limit: Maximum requests allowed
  • X-RateLimit-Remaining: Remaining requests
  • X-RateLimit-Reset: Unix timestamp when limit resets