Request Syntax URI Request Parameters Request Body Response Syntax Response Elements Errors See Also

GetFindingsV2

Return a list of findings that match the specified criteria. GetFindings and GetFindingsV2 both use securityhub:GetFindings in the Action element of an IAM policy statement. You must have permission to perform the securityhub:GetFindings action. This API is in private preview and subject to change.

Request Syntax


POST /findingsv2 HTTP/1.1
Content-type: application/json

{
   "Filters": { 
      "CompositeFilters": [ 
         { 
            "BooleanFilters": [ 
               { 
                  "FieldName": "string",
                  "Filter": { 
                     "Value": boolean
                  }
               }
            ],
            "DateFilters": [ 
               { 
                  "FieldName": "string",
                  "Filter": { 
                     "DateRange": { 
                        "Unit": "string",
                        "Value": number
                     },
                     "End": "string",
                     "Start": "string"
                  }
               }
            ],
            "MapFilters": [ 
               { 
                  "FieldName": "string",
                  "Filter": { 
                     "Comparison": "string",
                     "Key": "string",
                     "Value": "string"
                  }
               }
            ],
            "NumberFilters": [ 
               { 
                  "FieldName": "string",
                  "Filter": { 
                     "Eq": number,
                     "Gt": number,
                     "Gte": number,
                     "Lt": number,
                     "Lte": number
                  }
               }
            ],
            "Operator": "string",
            "StringFilters": [ 
               { 
                  "FieldName": "string",
                  "Filter": { 
                     "Comparison": "string",
                     "Value": "string"
                  }
               }
            ]
         }
      ],
      "CompositeOperator": "string"
   },
   "MaxResults": number,
   "NextToken": "string",
   "SortCriteria": [ 
      { 
         "Field": "string",
         "SortOrder": "string"
      }
   ]
}

URI Request Parameters

The request does not use any URI parameters.

Request Body

The request accepts the following data in JSON format.

Filters

The finding attributes used to define a condition to filter the returned OCSF findings. You can filter up to 10 composite filters. For each filter type inside of a composite filter, you can provide up to 20 filters.

Type: OcsfFindingFilters object

Required: No

MaxResults

The maximum number of results to return.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 100.

Required: No

NextToken

The token required for pagination. On your first call, set the value of this parameter to NULL. For subsequent calls, to continue listing data, set the value of this parameter to the value returned in the previous response.

Type: String

Required: No

SortCriteria

The finding attributes used to sort the list of returned findings.

Type: Array of SortCriterion objects

Required: No

Response Syntax


HTTP/1.1 200
Content-type: application/json

{
   "Findings": [ JSON value ],
   "NextToken": "string"
}

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

Findings

An array of security findings returned by the operation.

Type: Array of JSON values

NextToken

The pagination token to use to request the next page of results. Otherwise, this parameter is null.

Type: String

Errors

For information about the errors that are common to all actions, see Common Errors.

AccessDeniedException

You don't have permission to perform the action specified in the request.

HTTP Status Code: 403

ConflictException

The request causes conflict with the current state of the service resource.

HTTP Status Code: 409

InternalServerException

The request has failed due to an internal failure of the service.

HTTP Status Code: 500

ThrottlingException

The limit on the number of requests per second was exceeded.

HTTP Status Code: 429

ValidationException

The request has failed validation because it's missing required fields or has invalid inputs.

HTTP Status Code: 400