Suppressing Compliance Findings

Last updated: October 22, 2026

A compliance finding identifies a cloud resource that is non-compliant with an assigned compliance check. Suppressed findings are excluded from future scans, altering your compliance score and notifications. Findings can be suppressed for a specific time frame or indefinitely.

For example, you may have a check that looks for public S3 buckets, but you might suppress findings for a specific bucket because it contains data that is designed for public consumption.

Note: Directly suppressing a finding requires owning the compliance check or having compliance management permissions, either globally or on the OU or project where the finding was found. If you do not have the required permissions, you can request suppression. For more information, see Requesting Compliance Finding Suppression.

Suppressing a Compliance Finding

  1. Navigate to Compliance > Overview.

  2. On the Total Active Findings card, click View all. You can also choose to view findings by OU, project, or account.

  3. Click the ellipsis menu next to the finding you want to suppress and select Suppress. If this is not an option, you may not have the necessary permissions for this action.

  4. Enter a Suppression Reason describing why the finding is being suppressed. This field is required.

  5. (Optional) Turn on Suppression Timeout and set how long to suppress the finding (7 days by default, in hours or days). Once the time frame elapses, the finding will start showing in compliance scan results again if it has not been addressed.

  6. Click Suppress.