Retrieves a list of findings generated by the specified analyzer¶
Description¶
Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action.
To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide.
ListFindings is supported only for external access analyzers. You must use ListFindingsV2 for internal and unused access analyzers.
Usage¶
Arguments¶
-
analyzerArn[required] The ARN of the analyzer to retrieve findings from.
-
filterA filter to match for the findings to return.
-
sortThe sort order for the findings returned.
-
nextTokenA token used for pagination of results returned.
-
maxResultsThe maximum number of results to return in the response.
Value¶
A list with the following syntax:
list(
findings = list(
list(
id = "string",
principal = list(
"string"
),
action = list(
"string"
),
resource = "string",
isPublic = TRUE|FALSE,
resourceType = "AWS::S3::Bucket"|"AWS::IAM::Role"|"AWS::SQS::Queue"|"AWS::Lambda::Function"|"AWS::Lambda::LayerVersion"|"AWS::KMS::Key"|"AWS::SecretsManager::Secret"|"AWS::EFS::FileSystem"|"AWS::EC2::Snapshot"|"AWS::ECR::Repository"|"AWS::RDS::DBSnapshot"|"AWS::RDS::DBClusterSnapshot"|"AWS::SNS::Topic"|"AWS::S3Express::DirectoryBucket"|"AWS::DynamoDB::Table"|"AWS::DynamoDB::Stream"|"AWS::IAM::User",
condition = list(
"string"
),
createdAt = as.POSIXct(
"2015-01-01"
),
analyzedAt = as.POSIXct(
"2015-01-01"
),
updatedAt = as.POSIXct(
"2015-01-01"
),
status = "ACTIVE"|"ARCHIVED"|"RESOLVED",
resourceOwnerAccount = "string",
error = "string",
sources = list(
list(
type = "POLICY"|"BUCKET_ACL"|"S3_ACCESS_POINT"|"S3_ACCESS_POINT_ACCOUNT",
detail = list(
accessPointArn = "string",
accessPointAccount = "string"
)
)
),
resourceControlPolicyRestriction = "APPLICABLE"|"FAILED_TO_EVALUATE_RCP"|"NOT_APPLICABLE"|"APPLIED"
)
),
nextToken = "string"
)