---
title: "POST /findings/list"
method: POST
path: "/findings/list"
---

# POST /findings/list

`POST /findings/list`

Lists findings for your environment.

## Request body

- object
  - `maxResults` integer — The maximum number of results the response can return. If your request would return more than the maximum the response will return a <code>nextToken</code> value, use this value when you call the action again to get the remaining results.
  - `nextToken` string — A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. If your response returns more than the <code>maxResults</code> maximum value it will also return a <code>nextToken</code> value. For subsequent calls, use the <code>nextToken</code> value returned from the previous request to continue listing results after the first page.
  - `filterCriteria` object — Details on the criteria used to define the filter.
    - `findingArn` StringFilter[] — Details on the finding ARNs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `awsAccountId` StringFilter[] — Details of the Amazon Web Services account IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `findingType` StringFilter[] — Details on the finding types used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `severity` StringFilter[] — Details on the severity used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `firstObservedAt` DateFilter[] — Details on the date and time a finding was first seen used to filter findings.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `lastObservedAt` DateFilter[] — Details on the date and time a finding was last seen used to filter findings.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `updatedAt` DateFilter[] — Details on the date and time a finding was last updated at used to filter findings.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `findingStatus` StringFilter[] — Details on the finding status types used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `title` StringFilter[] — Details on the finding title used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `inspectorScore` NumberFilter[] — The Amazon Inspector score to filter on.
      - `upperInclusive` number, double — The highest number to be included in the filter.
      - `lowerInclusive` number, double — The lowest number to be included in the filter.
    - `resourceType` StringFilter[] — Details on the resource types used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `resourceId` StringFilter[] — Details on the resource IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `resourceTags` MapFilter[] — Details on the resource tags used to filter findings.
      - `comparison` 'EQUALS', required — The operator to use when comparing values in the filter.
      - `key` string, required — The tag key used in the filter.
      - `value` string — The tag value used in the filter.
    - `ec2InstanceImageId` StringFilter[] — Details of the Amazon EC2 instance image IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ec2InstanceVpcId` StringFilter[] — Details of the Amazon EC2 instance VPC IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ec2InstanceSubnetId` StringFilter[] — Details of the Amazon EC2 instance subnet IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImagePushedAt` DateFilter[] — Details on the Amazon ECR image push date and time used to filter findings.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `ecrImageArchitecture` StringFilter[] — Details of the Amazon ECR image architecture types used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImageRegistry` StringFilter[] — Details on the Amazon ECR registry used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImageRepositoryName` StringFilter[] — Details on the name of the Amazon ECR repository used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImageTags` StringFilter[] — The tags attached to the Amazon ECR container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImageHash` StringFilter[] — Details of the Amazon ECR image hashes used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `ecrImageLastInUseAt` DateFilter[] — Filter criteria indicating when an Amazon ECR image was last used in an Amazon ECS cluster task or Amazon EKS cluster pod.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `ecrImageInUseCount` NumberFilter[] — Filter criteria indicating when details for an Amazon ECR image include when an Amazon ECR image is in use.
      - `upperInclusive` number, double — The highest number to be included in the filter.
      - `lowerInclusive` number, double — The lowest number to be included in the filter.
    - `portRange` PortRangeFilter[] — Details on the port ranges used to filter findings.
      - `beginInclusive` integer — The port number the port range begins at.
      - `endInclusive` integer — The port number the port range ends at.
    - `networkProtocol` StringFilter[] — Details on network protocol used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `componentId` StringFilter[] — Details of the component IDs used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `componentType` StringFilter[] — Details of the component types used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `vulnerabilityId` StringFilter[] — Details on the vulnerability ID used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `vulnerabilitySource` StringFilter[] — Details on the vulnerability type used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `vendorSeverity` StringFilter[] — Details on the vendor severity used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `vulnerablePackages` PackageFilter[] — Details on the vulnerable packages used to filter findings.
      - `name` object — An object that contains details on the name of the package to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `version` object — The package version to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `epoch` object — An object that contains details on the package epoch to filter on.
        - `upperInclusive` number, double — The highest number to be included in the filter.
        - `lowerInclusive` number, double — The lowest number to be included in the filter.
      - `release` object — An object that contains details on the package release to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `architecture` object — An object that contains details on the package architecture type to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `sourceLayerHash` object — An object that contains details on the source layer hash to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `sourceLambdaLayerArn` object — An object that describes the details of a string filter.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
      - `filePath` object — An object that contains details on the package file path to filter on.
        - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
        - `value` string, required — The value to filter on.
    - `relatedVulnerabilities` StringFilter[] — Details on the related vulnerabilities used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `fixAvailable` StringFilter[] — Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>. A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `lambdaFunctionName` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the name of the function.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `lambdaFunctionLayers` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html"> layers</a>. A Lambda function can have up to five layers.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `lambdaFunctionRuntime` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the runtime environment for the Lambda function.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `lambdaFunctionLastModifiedAt` DateFilter[] — Filters the list of Amazon Web Services Lambda functions by the date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a>
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `lambdaFunctionExecutionRoleArn` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by execution role.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `exploitAvailable` StringFilter[] — Filters the list of Amazon Web Services Lambda findings by the availability of exploits.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `codeVulnerabilityDetectorName` StringFilter[] — The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `codeVulnerabilityDetectorTags` StringFilter[] — The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see <a href="https://docs.aws.amazon.com/codeguru/detector-library/java/tags/">Java tags</a>, or <a href="https://docs.aws.amazon.com/codeguru/detector-library/python/tags/">Python tags</a>.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `codeVulnerabilityFilePath` StringFilter[] — The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `epssScore` NumberFilter[] — The EPSS score used to filter findings.
      - `upperInclusive` number, double — The highest number to be included in the filter.
      - `lowerInclusive` number, double — The lowest number to be included in the filter.
    - `codeRepositoryProjectName` StringFilter[] — Filter criteria for findings based on the project name in a code repository.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `codeRepositoryProviderType` StringFilter[] — Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.).
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudProvider` StringFilter[] — Filter criteria for the cloud provider.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudProviderRegion` StringFilter[] — Filter criteria for the cloud provider region.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudProviderAccountId` StringFilter[] — Filter criteria for the cloud provider account ID.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudProviderOrgId` StringFilter[] — Filter criteria for the cloud provider organization ID.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudVmImageReference` StringFilter[] — Filter criteria for the image reference of a VM instance.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudVmNetworkId` StringFilter[] — Filter criteria for the network ID of a VM instance.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudVmSubnetIds` StringFilter[] — Filter criteria for the subnet IDs of a VM instance.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImageRepositoryName` StringFilter[] — Filter criteria for the repository name of a container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImageRegistry` StringFilter[] — Filter criteria for the registry of a container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImageDigest` StringFilter[] — Filter criteria for the digest of a container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImageTags` StringFilter[] — Filter criteria for the tags of a container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImagePushedAt` DateFilter[] — Filter criteria for when a container image was pushed.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `cloudImageArchitecture` StringFilter[] — Filter criteria for the architecture of a container image.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudImageLastInUseAt` DateFilter[] — Filter criteria for the last time a container image was in use.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `cloudImageInUseCount` NumberFilter[] — Filter criteria for the in-use count of a container image.
      - `upperInclusive` number, double — The highest number to be included in the filter.
      - `lowerInclusive` number, double — The lowest number to be included in the filter.
    - `cloudServerlessFunctionName` StringFilter[] — Filter criteria for the name of a serverless function.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudServerlessFunctionRuntime` StringFilter[] — Filter criteria for the runtime of a serverless function.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
    - `cloudServerlessFunctionLastModifiedAt` DateFilter[] — Filter criteria for when a serverless function was last modified.
      - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on.
      - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on.
    - `cloudServerlessFunctionExecutionRole` StringFilter[] — Filter criteria for the execution role of a serverless function.
      - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter.
      - `value` string, required — The value to filter on.
  - `sortCriteria` object — Details about the criteria used to sort finding results.
    - `field` 'AWS_ACCOUNT_ID' | 'FINDING_TYPE' | 'SEVERITY' | 'FIRST_OBSERVED_AT' | 'LAST_OBSERVED_AT' | 'FINDING_STATUS' | 'RESOURCE_TYPE' | 'ECR_IMAGE_PUSHED_AT' | 'ECR_IMAGE_REPOSITORY_NAME' | 'ECR_IMAGE_REGISTRY' | 'NETWORK_PROTOCOL' | 'COMPONENT_TYPE' | 'VULNERABILITY_ID' | 'VULNERABILITY_SOURCE' | 'INSPECTOR_SCORE' | 'VENDOR_SEVERITY' | 'EPSS_SCORE' — The finding detail field by which results are sorted.
    - `sortOrder` 'ASC' | 'DESC' — The order by which findings are sorted.

## Response `200`

Success

- ListFindingsResponse
  - `nextToken` string — A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
  - `findings` Finding[] — Contains details on the findings in your environment.
    - `findingArn` string, required — The Amazon Resource Number (ARN) of the finding.
    - `awsAccountId` string, required — The Amazon Web Services account ID associated with the finding.
    - `type` 'NETWORK_REACHABILITY' | 'PACKAGE_VULNERABILITY' | 'CODE_VULNERABILITY', required — The type of the finding. The <code>type</code> value determines the valid values for <code>resource</code> in your request. For more information, see <a href="https://docs.aws.amazon.com/inspector/latest/user/findings-types.html">Finding types</a> in the Amazon Inspector user guide.
    - `description` string, required — The description of the finding.
    - `title` string — The title of the finding.
    - `remediation` object, required — An object that contains the details about how to remediate a finding.
      - `recommendation` object — An object that contains information about the recommended course of action to remediate the finding.
        - `text` string — The recommended course of action to remediate the finding.
        - `Url` string — The URL address to the CVE remediation recommendations.
    - `severity` 'INFORMATIONAL' | 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' | 'UNTRIAGED', required — The severity of the finding. <code>UNTRIAGED</code> applies to <code>PACKAGE_VULNERABILITY</code> type findings that the vendor has not assigned a severity yet. For more information, see <a href="https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html">Severity levels for findings</a> in the Amazon Inspector user guide.
    - `firstObservedAt` string, date-time, required — The date and time that the finding was first observed.
    - `lastObservedAt` string, date-time, required — The date and time the finding was last observed. This timestamp for this field remains unchanged until a finding is updated.
    - `updatedAt` string, date-time — The date and time the finding was last updated at.
    - `status` 'ACTIVE' | 'SUPPRESSED' | 'CLOSED', required — The status of the finding.
    - `resources` Resource[], required — Contains information on the resources involved in a finding. The <code>resource</code> value determines the valid values for <code>type</code> in your request. For more information, see <a href="https://docs.aws.amazon.com/inspector/latest/user/findings-types.html">Finding types</a> in the Amazon Inspector user guide.
      - `type` 'AWS_EC2_INSTANCE' | 'AWS_ECR_CONTAINER_IMAGE' | 'AWS_ECR_REPOSITORY' | 'AWS_LAMBDA_FUNCTION' | 'CODE_REPOSITORY' | 'Microsoft.Compute/virtualMachines' | 'Microsoft.ContainerRegistry/registry/containerImage' | 'Microsoft.Web/sites', required — The type of resource.
      - `id` string, required — The ID of the resource.
      - `partition` string — The partition of the resource.
      - `region` string — The Amazon Web Services Region the impacted resource is located in.
      - `tags` object — The tags attached to the resource.
      - `details` object — An object that contains details about the resource involved in a finding.
        - `awsEc2Instance` object — An object that contains details about the Amazon EC2 instance involved in the finding.
          - `type` string — The type of the Amazon EC2 instance.
          - `imageId` string — The image ID of the Amazon EC2 instance.
          - `ipV4Addresses` IpV4Address[] — The IPv4 addresses of the Amazon EC2 instance.
          - `ipV6Addresses` IpV6Address[] — The IPv6 addresses of the Amazon EC2 instance.
          - `keyName` string — The name of the key pair used to launch the Amazon EC2 instance.
          - `iamInstanceProfileArn` string — The IAM instance profile ARN of the Amazon EC2 instance.
          - `vpcId` string — The VPC ID of the Amazon EC2 instance.
          - `subnetId` string — The subnet ID of the Amazon EC2 instance.
          - `launchedAt` string, date-time — The date and time the Amazon EC2 instance was launched at.
          - `platform` string — The platform of the Amazon EC2 instance.
        - `awsEcrContainerImage` object — An object that contains details about the Amazon ECR container image involved in the finding.
          - `repositoryName` string, required — The name of the repository the Amazon ECR container image resides in.
          - `imageTags` NonEmptyString[] — The image tags attached to the Amazon ECR container image.
          - `pushedAt` string, date-time — The date and time the Amazon ECR container image was pushed.
          - `author` string — The image author of the Amazon ECR container image.
          - `architecture` string — The architecture of the Amazon ECR container image.
          - `imageHash` string, required — The image hash of the Amazon ECR container image.
          - `registry` string, required — The registry for the Amazon ECR container image.
          - `platform` string — The platform of the Amazon ECR container image.
          - `lastInUseAt` string, date-time — The last time an Amazon ECR image was used in an Amazon ECS task or Amazon EKS pod.
          - `inUseCount` integer — The number of Amazon ECS tasks or Amazon EKS pods where the Amazon ECR container image is in use.
        - `awsLambdaFunction` object — A summary of the information about an Amazon Web Services Lambda function affected by a finding.
          - `functionName` string, required — The name of the Amazon Web Services Lambda function.
          - `runtime` 'NODEJS' | 'NODEJS_12_X' | 'NODEJS_14_X' | 'NODEJS_16_X' | 'JAVA_8' | 'JAVA_8_AL2' | 'JAVA_11' | 'PYTHON_3_7' | 'PYTHON_3_8' | 'PYTHON_3_9' | 'UNSUPPORTED' | 'NODEJS_18_X' | 'GO_1_X' | 'JAVA_17' | 'PYTHON_3_10' | 'PYTHON_3_11' | 'DOTNETCORE_3_1' | 'DOTNET_6' | 'DOTNET_7' | 'RUBY_2_7' | 'RUBY_3_2' | 'DOTNET_10' | 'NODEJS_24_X' | 'NODEJS_22_X' | 'JAVA_21' | 'JAVA_25', required — The runtime environment for the Amazon Web Services Lambda function.
          - `codeSha256` string, required — The SHA256 hash of the Amazon Web Services Lambda function's deployment package.
          - `version` string, required — The version of the Amazon Web Services Lambda function.
          - `executionRoleArn` string, required — The Amazon Web Services Lambda function's execution role.
          - `layers` LambdaLayerArn[] — The Amazon Web Services Lambda function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html"> layers</a>. A Lambda function can have up to five layers.
          - `vpcConfig` object — The Amazon Web Services Lambda function's networking configuration.
            - `subnetIds` SubnetId[] — A list of VPC subnet IDs.
            - `securityGroupIds` SecurityGroupId[] — The VPC security groups and subnets that are attached to an Amazon Web Services Lambda function. For more information, see <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html">VPC Settings</a>.
            - `vpcId` string — The ID of the VPC.
          - `packageType` 'IMAGE' | 'ZIP' — The type of deployment package. Set to <code>Image</code> for container image and set <code>Zip</code> for .zip file archive.
          - `architectures` Architecture[] — The instruction set architecture that the Amazon Web Services Lambda function supports. Architecture is a string array with one of the valid values. The default architecture value is <code>x86_64</code>.
          - `lastModifiedAt` string, date-time — The date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a>
        - `codeRepository` object — Contains details about a code repository resource associated with a finding.
          - `projectName` string — The name of the project in the code repository.
          - `integrationArn` string — The Amazon Resource Name (ARN) of the code security integration associated with the repository.
          - `providerType` 'GITHUB' | 'GITLAB_SELF_MANAGED' — The type of repository provider (such as GitHub, GitLab, etc.).
        - `vm` object — An object that contains details about a VM instance involved in the finding.
          - `type` string — The type of the VM instance.
          - `vmName` string — The name of the VM instance.
          - `vmImageReference` string — The image reference of the VM instance.
          - `ipV4Addresses` IpV4Address[] — The IPv4 addresses of the VM instance.
          - `ipV6Addresses` IpV6Address[] — The IPv6 addresses of the VM instance.
          - `networkId` string — The network ID associated with the VM instance.
          - `subnetIds` NonEmptyString[] — The subnet IDs of the VM instance.
          - `securityGroupIds` NonEmptyString[] — The security group IDs associated with the VM instance.
          - `launchedAt` string, date-time — The date and time the VM instance was launched.
          - `platform` string — The platform of the VM instance.
          - `executionRole` string — The execution role of the VM instance.
          - `keyName` string — The key name associated with the VM instance.
        - `image` object — An object that contains details about a container image involved in the finding.
          - `repositoryName` string — The name of the repository the container image resides in.
          - `registry` string — The registry for the container image.
          - `imageTags` NonEmptyString[] — The image tags attached to the container image.
          - `imageDigest` string — The image digest of the container image.
          - `pushedAt` string, date-time — The date and time the container image was pushed.
          - `architecture` string — The architecture of the container image.
          - `author` string — The author of the container image.
          - `inUseCount` integer — The number of times the container image is in use.
          - `lastInUseAt` string, date-time — The last time the container image was in use.
          - `platform` string — The platform of the container image.
        - `serverlessFunction` object — An object that contains details about a serverless function involved in the finding.
          - `serverlessFunctionName` string — The name of the serverless function.
          - `runtime` string — The runtime of the serverless function.
          - `version` string — The version of the serverless function.
          - `codeDigest` string — The code digest of the serverless function.
          - `lastModifiedAt` string, date-time — The date and time the serverless function was last modified.
          - `networkId` string — The network ID associated with the serverless function.
          - `subnetIds` NonEmptyString[] — The subnet IDs associated with the serverless function.
          - `securityGroupIds` NonEmptyString[] — The security group IDs associated with the serverless function.
          - `executionRole` string — The execution role of the serverless function.
          - `packageType` 'IMAGE' | 'ZIP' — The package type of the serverless function.
          - `architectures` Architecture[] — The architectures of the serverless function.
          - `layers` ServerlessFunctionLayerUrn[] — The layers of the serverless function.
      - `provider` 'AWS' | 'AZURE' — The cloud provider of the resource.
      - `providerAccountId` string — The cloud provider account ID of the resource.
      - `providerOrgId` string — The cloud provider organization ID of the resource.
    - `inspectorScore` number, double — The Amazon Inspector score given to the finding.
    - `inspectorScoreDetails` object — An object that contains details of the Amazon Inspector score.
      - `adjustedCvss` object — An object that contains details about the CVSS score given to a finding.
        - `scoreSource` string, required — The source for the CVSS score.
        - `cvssSource` string — The source of the CVSS data.
        - `version` string, required — The CVSS version used in scoring.
        - `score` number, double, required — The CVSS score.
        - `scoringVector` string, required — The vector for the CVSS score.
        - `adjustments` CvssScoreAdjustment[] — An object that contains details about adjustment Amazon Inspector made to the CVSS score.
          - `metric` string, required — The metric used to adjust the CVSS score.
          - `reason` string, required — The reason the CVSS score has been adjustment.
    - `networkReachabilityDetails` object — An object that contains the details of a network reachability finding.
      - `openPortRange` object, required — An object that contains details about the open port range associated with a finding.
        - `begin` integer, required — The beginning port in a port range.
        - `end` integer, required — The ending port in a port range.
      - `protocol` 'TCP' | 'UDP', required — The protocol associated with a finding.
      - `networkPath` object, required — An object that contains details about a network path associated with a finding.
        - `steps` Step[] — The details on the steps in the network path.
          - `componentId` string, required — The component ID.
          - `componentType` string, required — The component type.
          - `componentArn` string — The component ARN. The ARN can be null and is not displayed in the Amazon Web Services console.
    - `packageVulnerabilityDetails` object — An object that contains the details of a package vulnerability finding.
      - `vulnerabilityId` string, required — The ID given to this vulnerability.
      - `vulnerablePackages` VulnerablePackage[] — The packages impacted by this vulnerability.
        - `name` string, required — The name of the vulnerable package.
        - `version` string, required — The version of the vulnerable package.
        - `sourceLayerHash` string — The source layer hash of the vulnerable package.
        - `epoch` integer — The epoch of the vulnerable package.
        - `release` string — The release of the vulnerable package.
        - `arch` string — The architecture of the vulnerable package.
        - `packageManager` 'BUNDLER' | 'CARGO' | 'COMPOSER' | 'NPM' | 'NUGET' | 'PIPENV' | 'POETRY' | 'YARN' | 'GOBINARY' | 'GOMOD' | 'JAR' | 'OS' | 'PIP' | 'PYTHONPKG' | 'NODEPKG' | 'POM' | 'GEMSPEC' | 'DOTNET_CORE' — The package manager of the vulnerable package.
        - `filePath` string — The file path of the vulnerable package.
        - `fixedInVersion` string — The version of the package that contains the vulnerability fix.
        - `remediation` string — The code to run in your environment to update packages with a fix available.
        - `sourceLambdaLayerArn` string — The Amazon Resource Number (ARN) of the Amazon Web Services Lambda function affected by a finding.
      - `source` string, required — The source of the vulnerability information.
      - `cvss` CvssScore[] — An object that contains details about the CVSS score of a finding.
        - `baseScore` number, double, required — The base CVSS score used for the finding.
        - `scoringVector` string, required — The vector string of the CVSS score.
        - `version` string, required — The version of CVSS used for the score.
        - `source` string, required — The source of the CVSS score.
      - `relatedVulnerabilities` VulnerabilityId[] — One or more vulnerabilities related to the one identified in this finding.
      - `sourceUrl` string — A URL to the source of the vulnerability information.
      - `vendorSeverity` string — The severity the vendor has given to this vulnerability type.
      - `vendorCreatedAt` string, date-time — The date and time that this vulnerability was first added to the vendor's database.
      - `vendorUpdatedAt` string, date-time — The date and time the vendor last updated this vulnerability in their database.
      - `referenceUrls` NonEmptyString[] — One or more URLs that contain details about this vulnerability type.
    - `fixAvailable` 'YES' | 'NO' | 'PARTIAL' — Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>. A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.
    - `exploitAvailable` 'YES' | 'NO' — If a finding discovered in your environment has an exploit available.
    - `exploitabilityDetails` object — The details of an exploit available for a finding discovered in your environment.
      - `lastKnownExploitAt` string, date-time — The date and time of the last exploit associated with a finding discovered in your environment.
    - `codeVulnerabilityDetails` object — Details about the code vulnerability identified in a Lambda function used to filter findings.
      - `filePath` object, required — Contains information on where the code vulnerability is located in your code.
        - `fileName` string, required — The name of the file the code vulnerability was found in.
        - `filePath` string, required — The file path to the code that a vulnerability was found in.
        - `startLine` integer, required — The line number of the first line of code that a vulnerability was found in.
        - `endLine` integer, required — The line number of the last line of code that a vulnerability was found in.
      - `detectorTags` NonEmptyString[] — The detector tag associated with the vulnerability. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see <a href="https://docs.aws.amazon.com/codeguru/detector-library/java/tags/">Java tags</a>, or <a href="https://docs.aws.amazon.com/codeguru/detector-library/python/tags/">Python tags</a>.
      - `referenceUrls` NonEmptyString[] — A URL containing supporting documentation about the code vulnerability detected.
      - `ruleId` string — The identifier for a rule that was used to detect the code vulnerability.
      - `sourceLambdaLayerArn` string — The Amazon Resource Name (ARN) of the Lambda layer that the code vulnerability was detected in.
      - `detectorId` string, required — The ID for the Amazon CodeGuru detector associated with the finding. For more information on detectors see <a href="https://docs.aws.amazon.com/codeguru/detector-library">Amazon CodeGuru Detector Library</a>.
      - `detectorName` string, required — The name of the detector used to identify the code vulnerability. For more information on detectors see <a href="https://docs.aws.amazon.com/codeguru/detector-library">CodeGuru Detector Library</a>.
      - `cwes` NonEmptyString[], required — The Common Weakness Enumeration (CWE) item associated with the detected vulnerability.
    - `epss` object — The finding's EPSS score.
      - `score` number, double — The EPSS score.

## Other responses

- `480` — ValidationException
- `481` — ThrottlingException
- `482` — InternalServerException

---

[API](https://skmtc.net/aws/apis/inspector2.md) · [All operations](https://skmtc.net/aws/apis/inspector2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/inspector2/versions/c51110c7cd43/schema)