aws accessanalyzer get-finding

Retrieves information about the specified finding. AWS CLI reference

1 example 2 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To retrieve information about the specified finding

The following get-finding example etrieves information about the specified finding in your AWS account.

aws accessanalyzer get-finding --analyzer-arn arn:aws:access-analyzer:us-west-2:123456789012:analyzer/ConsoleAnalyzer-organization --id a1b2c3d4-5678-90ab-cdef-EXAMPLE11111

Identify

--analyzer-arnThe ARN of the analyzer that generated the finding.

--idThe ID of the finding to retrieve.

Its output

{
    "finding": {
        "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
        "principal": {
            "Federated": "cognito-identity.amazonaws.com"
        },
        "action": [
            "sts:AssumeRoleWithWebIdentity"
        ],
        "resource": "arn:aws:iam::123456789012:role/Cognito_testpoolAuth_Role",
        "isPublic": false,
        "resourceType": "AWS::IAM::Role",
        "condition": {
            "cognito-identity.amazonaws.com:aud": "us-west-2:a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
        },
        "createdAt": "2021-02-26T21:17:50.905000+00:00",
        "analyzedAt": "2024-02-16T18:17:47.888000+00:00",
        "updatedAt": "2021-02-26T21:17:50.905000+00:00",
        "status": "ACTIVE",
        "resourceOwnerAccount": "123456789012"
    }
}

For more information, see Reviewing findings in the AWS IAM User Guide.

Options

2 in the AWS CLI reference

--analyzer-arnThe ARN of the analyzer that generated the finding.

--idThe ID of the finding to retrieve.