Skip to main content

finding_v2s

Creates, updates, deletes, gets or lists a finding_v2s resource.

Overview

Namefinding_v2s
TypeResource
Idaws.accessanalyzer.finding_v2s

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
external_access_detailsobjectThe details for an external access analyzer finding.
internal_access_detailsobjectThe details for an internal access analyzer finding. This contains information about access patterns identified within your Amazon Web Services organization or account.
unused_iam_role_detailsobjectThe details for an unused access analyzer finding with an unused IAM role finding type.
unused_iam_user_access_key_detailsobjectThe details for an unused access analyzer finding with an unused IAM user access key finding type.
unused_iam_user_password_detailsobjectThe details for an unused access analyzer finding with an unused IAM user password finding type.
unused_permission_detailsobjectThe details for an unused access analyzer finding with an unused permission finding type.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_finding_v2selectanalyzerArn, id, regionmaxResults, nextTokenRetrieves information about the specified finding. GetFinding and GetFindingV2 both use access-analyzer:GetFinding in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:GetFinding action.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
analyzerArnstringThe ARN of the analyzer that generated the finding.
idstringThe ID of the finding to retrieve.
regionstringAWS region (default: us-east-1)
maxResultsintegerThe maximum number of results to return in the response.
nextTokenstringA token used for pagination of results returned.

SELECT examples

Retrieves information about the specified finding. GetFinding and GetFindingV2 both use access-analyzer:GetFinding in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:GetFinding action.

SELECT
external_access_details,
internal_access_details,
unused_iam_role_details,
unused_iam_user_access_key_details,
unused_iam_user_password_details,
unused_permission_details
FROM aws.accessanalyzer.finding_v2s
WHERE analyzerArn = '{{ analyzerArn }}' -- required
AND id = '{{ id }}' -- required
AND region = '{{ region }}' -- required
AND maxResults = '{{ maxResults }}'
AND nextToken = '{{ nextToken }}'
;