--- title: "POST /reporting/create" method: POST path: "/reporting/create" --- # POST /reporting/create `POST /reporting/create` Creates a finding report. By default only ACTIVE findings are returned in the report. To see SUPRESSED or CLOSED findings you must specify a value for the findingStatus filter criteria. ## Request body - object - `filterCriteria` object — Details on the criteria used to define the filter. - `findingArn` StringFilter[] — Details on the finding ARNs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `awsAccountId` StringFilter[] — Details of the Amazon Web Services account IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `findingType` StringFilter[] — Details on the finding types used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `severity` StringFilter[] — Details on the severity used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `firstObservedAt` DateFilter[] — Details on the date and time a finding was first seen used to filter findings. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `lastObservedAt` DateFilter[] — Details on the date and time a finding was last seen used to filter findings. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `updatedAt` DateFilter[] — Details on the date and time a finding was last updated at used to filter findings. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `findingStatus` StringFilter[] — Details on the finding status types used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `title` StringFilter[] — Details on the finding title used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `inspectorScore` NumberFilter[] — The Amazon Inspector score to filter on. - `upperInclusive` number, double — The highest number to be included in the filter. - `lowerInclusive` number, double — The lowest number to be included in the filter. - `resourceType` StringFilter[] — Details on the resource types used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `resourceId` StringFilter[] — Details on the resource IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `resourceTags` MapFilter[] — Details on the resource tags used to filter findings. - `comparison` 'EQUALS', required — The operator to use when comparing values in the filter. - `key` string, required — The tag key used in the filter. - `value` string — The tag value used in the filter. - `ec2InstanceImageId` StringFilter[] — Details of the Amazon EC2 instance image IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ec2InstanceVpcId` StringFilter[] — Details of the Amazon EC2 instance VPC IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ec2InstanceSubnetId` StringFilter[] — Details of the Amazon EC2 instance subnet IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImagePushedAt` DateFilter[] — Details on the Amazon ECR image push date and time used to filter findings. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `ecrImageArchitecture` StringFilter[] — Details of the Amazon ECR image architecture types used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImageRegistry` StringFilter[] — Details on the Amazon ECR registry used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImageRepositoryName` StringFilter[] — Details on the name of the Amazon ECR repository used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImageTags` StringFilter[] — The tags attached to the Amazon ECR container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImageHash` StringFilter[] — Details of the Amazon ECR image hashes used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `ecrImageLastInUseAt` DateFilter[] — Filter criteria indicating when an Amazon ECR image was last used in an Amazon ECS cluster task or Amazon EKS cluster pod. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `ecrImageInUseCount` NumberFilter[] — Filter criteria indicating when details for an Amazon ECR image include when an Amazon ECR image is in use. - `upperInclusive` number, double — The highest number to be included in the filter. - `lowerInclusive` number, double — The lowest number to be included in the filter. - `portRange` PortRangeFilter[] — Details on the port ranges used to filter findings. - `beginInclusive` integer — The port number the port range begins at. - `endInclusive` integer — The port number the port range ends at. - `networkProtocol` StringFilter[] — Details on network protocol used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `componentId` StringFilter[] — Details of the component IDs used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `componentType` StringFilter[] — Details of the component types used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `vulnerabilityId` StringFilter[] — Details on the vulnerability ID used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `vulnerabilitySource` StringFilter[] — Details on the vulnerability type used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `vendorSeverity` StringFilter[] — Details on the vendor severity used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `vulnerablePackages` PackageFilter[] — Details on the vulnerable packages used to filter findings. - `name` object — An object that contains details on the name of the package to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `version` object — The package version to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `epoch` object — An object that contains details on the package epoch to filter on. - `upperInclusive` number, double — The highest number to be included in the filter. - `lowerInclusive` number, double — The lowest number to be included in the filter. - `release` object — An object that contains details on the package release to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `architecture` object — An object that contains details on the package architecture type to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `sourceLayerHash` object — An object that contains details on the source layer hash to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `sourceLambdaLayerArn` object — An object that describes the details of a string filter. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `filePath` object — An object that contains details on the package file path to filter on. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `relatedVulnerabilities` StringFilter[] — Details on the related vulnerabilities used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `fixAvailable` StringFilter[] — Details on whether a fix is available through a version update. This value can be YES, NO, or PARTIAL. A PARTIAL fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `lambdaFunctionName` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the name of the function. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `lambdaFunctionLayers` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the function's layers. A Lambda function can have up to five layers. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `lambdaFunctionRuntime` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by the runtime environment for the Lambda function. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `lambdaFunctionLastModifiedAt` DateFilter[] — Filters the list of Amazon Web Services Lambda functions by the date and time that a user last updated the configuration, in ISO 8601 format - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `lambdaFunctionExecutionRoleArn` StringFilter[] — Filters the list of Amazon Web Services Lambda functions by execution role. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `exploitAvailable` StringFilter[] — Filters the list of Amazon Web Services Lambda findings by the availability of exploits. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `codeVulnerabilityDetectorName` StringFilter[] — The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `codeVulnerabilityDetectorTags` StringFilter[] — The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see Java tags, or Python tags. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `codeVulnerabilityFilePath` StringFilter[] — The file path to the file in a Lambda function that contains a code vulnerability used to filter findings. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `epssScore` NumberFilter[] — The EPSS score used to filter findings. - `upperInclusive` number, double — The highest number to be included in the filter. - `lowerInclusive` number, double — The lowest number to be included in the filter. - `codeRepositoryProjectName` StringFilter[] — Filter criteria for findings based on the project name in a code repository. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `codeRepositoryProviderType` StringFilter[] — Filter criteria for findings based on the repository provider type (such as GitHub, GitLab, etc.). - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudProvider` StringFilter[] — Filter criteria for the cloud provider. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudProviderRegion` StringFilter[] — Filter criteria for the cloud provider region. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudProviderAccountId` StringFilter[] — Filter criteria for the cloud provider account ID. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudProviderOrgId` StringFilter[] — Filter criteria for the cloud provider organization ID. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudVmImageReference` StringFilter[] — Filter criteria for the image reference of a VM instance. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudVmNetworkId` StringFilter[] — Filter criteria for the network ID of a VM instance. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudVmSubnetIds` StringFilter[] — Filter criteria for the subnet IDs of a VM instance. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImageRepositoryName` StringFilter[] — Filter criteria for the repository name of a container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImageRegistry` StringFilter[] — Filter criteria for the registry of a container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImageDigest` StringFilter[] — Filter criteria for the digest of a container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImageTags` StringFilter[] — Filter criteria for the tags of a container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImagePushedAt` DateFilter[] — Filter criteria for when a container image was pushed. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `cloudImageArchitecture` StringFilter[] — Filter criteria for the architecture of a container image. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudImageLastInUseAt` DateFilter[] — Filter criteria for the last time a container image was in use. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `cloudImageInUseCount` NumberFilter[] — Filter criteria for the in-use count of a container image. - `upperInclusive` number, double — The highest number to be included in the filter. - `lowerInclusive` number, double — The lowest number to be included in the filter. - `cloudServerlessFunctionName` StringFilter[] — Filter criteria for the name of a serverless function. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudServerlessFunctionRuntime` StringFilter[] — Filter criteria for the runtime of a serverless function. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `cloudServerlessFunctionLastModifiedAt` DateFilter[] — Filter criteria for when a serverless function was last modified. - `startInclusive` string, date-time — A timestamp representing the start of the time period filtered on. - `endInclusive` string, date-time — A timestamp representing the end of the time period filtered on. - `cloudServerlessFunctionExecutionRole` StringFilter[] — Filter criteria for the execution role of a serverless function. - `comparison` 'EQUALS' | 'PREFIX' | 'NOT_EQUALS', required — The operator to use when comparing values in the filter. - `value` string, required — The value to filter on. - `reportFormat` 'CSV' | 'JSON', required — The format to generate the report in. - `s3Destination` object, required — Contains details of the Amazon S3 bucket and KMS key used to export findings. - `bucketName` string — The name of the Amazon S3 bucket to export findings to. - `keyPrefix` string — The prefix that the findings will be written under. - `kmsKeyArn` string — The ARN of the KMS key used to encrypt data when exporting findings. ## Response `200` Success - CreateFindingsReportResponse - `reportId` string — The ID of the report. ## Other responses - `480` — ValidationException - `481` — AccessDeniedException - `482` — ResourceNotFoundException - `483` — ThrottlingException - `484` — InternalServerException --- [API](https://skmtc.net/aws/apis/inspector2.md) · [All operations](https://skmtc.net/aws/apis/inspector2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/inspector2/versions/c51110c7cd43/schema)