---
title: "POST /finding"
method: POST
path: "/finding"
---

# POST /finding

`POST /finding`

Retrieves a list of findings generated by the specified analyzer.

To learn about filter keys that you can use to retrieve a list of findings, see [IAM Access Analyzer filter keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-filter-keys.html) in the **IAM User Guide**.

## Query parameters

- `maxResults` string
- `nextToken` string

## Request body

- object
  - `analyzerArn` string, required — The <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html#permission-resources">ARN of the analyzer</a> to retrieve findings from.
  - `filter` object — A filter to match for the findings to return.
  - `sort` object — The criteria used to sort.
    - `attributeName` string — The name of the attribute to sort on.
    - `orderBy` 'ASC' | 'DESC' — The sort order, ascending or descending.
  - `nextToken` string — A token used for pagination of results returned.
  - `maxResults` integer — The maximum number of results to return in the response.

## Response `200`

Success

- ListFindingsResponse — The response to the request.
  - `findings` FindingSummary[], required — A list of findings retrieved from the analyzer that match the filter criteria specified, if any.
    - `id` string, required — The ID of the finding.
    - `principal` object — The external principal that has access to a resource within the zone of trust.
    - `action` String[] — The action in the analyzed policy statement that an external principal has permission to use.
    - `resource` string — The resource that the external principal has access to.
    - `isPublic` boolean — Indicates whether the finding reports a resource that has a policy that allows public access.
    - `resourceType` 'AWS::S3::Bucket' | 'AWS::IAM::Role' | 'AWS::SQS::Queue' | 'AWS::Lambda::Function' | 'AWS::Lambda::LayerVersion' | 'AWS::KMS::Key' | 'AWS::SecretsManager::Secret' | 'AWS::EFS::FileSystem' | 'AWS::EC2::Snapshot' | 'AWS::ECR::Repository' | 'AWS::RDS::DBSnapshot' | 'AWS::RDS::DBClusterSnapshot' | 'AWS::SNS::Topic', required — The type of the resource that the external principal has access to.
    - `condition` object, required — The condition in the analyzed policy statement that resulted in a finding.
    - `createdAt` string, date-time, required — The time at which the finding was created.
    - `analyzedAt` string, date-time, required — The time at which the resource-based policy that generated the finding was analyzed.
    - `updatedAt` string, date-time, required — The time at which the finding was most recently updated.
    - `status` 'ACTIVE' | 'ARCHIVED' | 'RESOLVED', required — The status of the finding.
    - `resourceOwnerAccount` string, required — The Amazon Web Services account ID that owns the resource.
    - `error` string — The error that resulted in an Error finding.
    - `sources` FindingSource[] — The sources of the finding. This indicates how the access that generated the finding is granted. It is populated for Amazon S3 bucket findings.
      - `type` 'POLICY' | 'BUCKET_ACL' | 'S3_ACCESS_POINT' | 'S3_ACCESS_POINT_ACCOUNT', required — Indicates the type of access that generated the finding.
      - `detail` object — Includes details about how the access that generated the finding is granted. This is populated for Amazon S3 bucket findings.
        - `accessPointArn` string — The ARN of the access point that generated the finding. The ARN format depends on whether the ARN represents an access point or a multi-region access point.
        - `accessPointAccount` string — The account of the cross-account access point that generated the finding.
  - `nextToken` string — A token used for pagination of results returned.

## Other responses

- `480` — ResourceNotFoundException
- `481` — ValidationException
- `482` — InternalServerException
- `483` — ThrottlingException
- `484` — AccessDeniedException

---

[API](https://skmtc.net/aws/apis/accessanalyzer.md) · [All operations](https://skmtc.net/aws/apis/accessanalyzer/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/accessanalyzer/versions/d729b5bbb9cd/schema)