findings_v2s
Creates, updates, deletes, gets or lists a findings_v2s resource.
Overview
| Name | findings_v2s |
| Type | Resource |
| Id | aws.accessanalyzer.findings_v2s |
Fields
The following fields are returned by SELECT queries:
- list_findings_v2
| Name | Datatype | Description |
|---|---|---|
id | string | The ID of the finding. |
analyzed_at | string (date-time) | The time at which the resource-based policy or IAM entity that generated the finding was analyzed. |
created_at | string (date-time) | The time at which the finding was created. |
error | string | The error that resulted in an Error finding. |
finding_type | string | The type of the access finding. For external access analyzers, the type is ExternalAccess. For unused access analyzers, the type can be UnusedIAMRole, UnusedIAMUserAccessKey, UnusedIAMUserPassword, or UnusedPermission. For internal access analyzers, the type is InternalAccess. (ExternalAccess, UnusedIAMRole, UnusedIAMUserAccessKey, UnusedIAMUserPassword, UnusedPermission, InternalAccess) |
resource | string | The resource that the external principal has access to. |
resource_owner_account | string | The Amazon Web Services account ID that owns the resource. |
resource_type | string | The type of the resource that the external principal has access to. (AWS::S3::Bucket, AWS::IAM::Role, AWS::SQS::Queue, AWS::Lambda::Function, AWS::Lambda::LayerVersion, AWS::KMS::Key, AWS::SecretsManager::Secret, AWS::EFS::FileSystem, AWS::EC2::Snapshot, AWS::ECR::Repository, AWS::RDS::DBSnapshot, AWS::RDS::DBClusterSnapshot, AWS::SNS::Topic, AWS::S3Express::DirectoryBucket, AWS::DynamoDB::Table, AWS::DynamoDB::Stream, AWS::IAM::User) |
status | string | The status of the finding. (ACTIVE, ARCHIVED, RESOLVED) |
updated_at | string (date-time) | The time at which the finding was most recently updated. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
list_findings_v2 | select | region | Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action. To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- list_findings_v2
Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action. To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide.
SELECT
id,
analyzed_at,
created_at,
error,
finding_type,
resource,
resource_owner_account,
resource_type,
status,
updated_at
FROM aws.accessanalyzer.findings_v2s
WHERE region = '{{ region }}' -- required
;