---
title: "GET /audit/mitigationactions/tasks/{taskId}"
method: GET
path: "/audit/mitigationactions/tasks/{taskId}"
---

# GET /audit/mitigationactions/tasks/{taskId}

`GET /audit/mitigationactions/tasks/{taskId}`

Gets information about an audit mitigation task that is used to apply mitigation actions to a set of audit findings. Properties include the actions being applied, the audit checks to which they're being applied, the task status, and aggregated task statistics.

## Path parameters

- `taskId` string, required

## Response `200`

Success

- DescribeAuditMitigationActionsTaskResponse
  - `taskStatus` 'IN_PROGRESS' | 'COMPLETED' | 'FAILED' | 'CANCELED' — The current status of the task.
  - `startTime` string, date-time — The date and time when the task was started.
  - `endTime` string, date-time — The date and time when the task was completed or canceled.
  - `taskStatistics` object — Aggregate counts of the results when the mitigation tasks were applied to the findings for this audit mitigation actions task.
  - `target` object — Identifies the findings to which the mitigation actions are applied. This can be by audit checks, by audit task, or a set of findings.
    - `auditTaskId` string — If the task will apply a mitigation action to findings from a specific audit, this value uniquely identifies the audit.
    - `findingIds` FindingId[] — If the task will apply a mitigation action to one or more listed findings, this value uniquely identifies those findings.
    - `auditCheckToReasonCodeFilter` object — Specifies a filter in the form of an audit check and set of reason codes that identify the findings from the audit to which the audit mitigation actions task apply.
  - `auditCheckToActionsMapping` object — Specifies the mitigation actions that should be applied to specific audit checks.
  - `actionsDefinition` MitigationAction[] — Specifies the mitigation actions and their parameters that are applied as part of this task.
    - `name` string — A user-friendly name for the mitigation action.
    - `id` string — A unique identifier for the mitigation action.
    - `roleArn` string — The IAM role ARN used to apply this mitigation action.
    - `actionParams` object — The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply.
      - `updateDeviceCertificateParams` object — Parameters to define a mitigation action that changes the state of the device certificate to inactive.
        - `action` 'DEACTIVATE', required — The action that you want to apply to the device certificate. The only supported value is <code>DEACTIVATE</code>.
      - `updateCACertificateParams` object — Parameters to define a mitigation action that changes the state of the CA certificate to inactive.
        - `action` 'DEACTIVATE', required — The action that you want to apply to the CA certificate. The only supported value is <code>DEACTIVATE</code>.
      - `addThingsToThingGroupParams` object — Parameters to define a mitigation action that moves devices associated with a certificate to one or more specified thing groups, typically for quarantine.
        - `thingGroupNames` ThingGroupName[], required — The list of groups to which you want to add the things that triggered the mitigation action. You can add a thing to a maximum of 10 groups, but you can't add a thing to more than one group in the same hierarchy.
        - `overrideDynamicGroups` boolean — Specifies if this mitigation action can move the things that triggered the mitigation action even if they are part of one or more dynamic thing groups.
      - `replaceDefaultPolicyVersionParams` object — Parameters to define a mitigation action that adds a blank policy to restrict permissions.
        - `templateName` 'BLANK_POLICY', required — The name of the template to be applied. The only supported value is <code>BLANK_POLICY</code>.
      - `enableIoTLoggingParams` object — Parameters to define a mitigation action that enables Amazon Web Services IoT Core logging at a specified level of detail.
        - `roleArnForLogging` string, required — The Amazon Resource Name (ARN) of the IAM role used for logging.
        - `logLevel` 'DEBUG' | 'INFO' | 'ERROR' | 'WARN' | 'DISABLED', required — Specifies the type of information to be logged.
      - `publishFindingToSnsParams` object — Parameters to define a mitigation action that publishes findings to Amazon Simple Notification Service (Amazon SNS. You can implement your own custom actions in response to the Amazon SNS messages.
        - `topicArn` string, required — The ARN of the topic to which you want to publish the findings.

## Other responses

- `480` — InvalidRequestException
- `481` — ResourceNotFoundException
- `482` — ThrottlingException
- `483` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)