CmdID / aws / aws detective
aws detective list-investigations
Detective investigations lets you investigate IAM users and IAM roles using indicators of compromise. AWS CLI reference
5 options Its page in the AWS CLI reference
Options
--filter-criteriaFilters the investigation results based on a criteria.--graph-arnThe Amazon Resource Name (ARN) of the behavior graph.--max-resultsLists the maximum number of investigations in a page.--next-tokenLists if there are more results available.--sort-criteriaSorts the investigation results based on a criteria.