Technical Concepts
Control evidence format
The structured record format control results arrive in, and the admission check that stops anything else being scored as if it were evidence.
What it is
Control results arrive as structured records in the AWS Security Finding Format. Each describes one check evaluated against one resource, carrying a compliance status, a severity, a check identifier and the resources involved.
How GovIntel admits it
Only files recognised as records of this shape are scored. Anything else present in the evidence directory is listed in the assessment note and ignored, rather than parsed hopefully and misread.
What GovIntel reads from each record
The compliance status, the severity, the check identifier, and the resource identifiers. Not the scanner's own remediation text, which is deliberately excluded from what a customer receives.
What it does not mean
The format is the scanner's, not GovIntel's. Records that arrive in it are inputs, not findings: they become findings only after classification and deduplication.