---
title: "GET /audit/relatedResources#findingId"
method: GET
path: "/audit/relatedResources#findingId"
---

# GET /audit/relatedResources#findingId

`GET /audit/relatedResources#findingId`

The related resources of an Audit finding. The following resources can be returned from calling this API:

*   DEVICE\_CERTIFICATE
    
*   CA\_CERTIFICATE
    
*   IOT\_POLICY
    
*   COGNITO\_IDENTITY\_POOL
    
*   CLIENT\_ID
    
*   ACCOUNT\_SETTINGS
    
*   ROLE\_ALIAS
    
*   IAM\_ROLE
    
*   ISSUER\_CERTIFICATE
    

This API is similar to DescribeAuditFinding's [RelatedResources](https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditFinding.html) but provides pagination and is not limited to 10 resources. When calling [DescribeAuditFinding](https://docs.aws.amazon.com/iot/latest/apireference/API_DescribeAuditFinding.html) for the intermediate CA revoked for active device certificates check, RelatedResources will not be populated. You must use this API, ListRelatedResourcesForAuditFinding, to list the certificates.

## Query parameters

- `findingId` string, required
- `nextToken` string
- `maxResults` integer

## Response `200`

Success

- ListRelatedResourcesForAuditFindingResponse
  - `relatedResources` RelatedResource[] — The related resources.
    - `resourceType` 'DEVICE_CERTIFICATE' | 'CA_CERTIFICATE' | 'IOT_POLICY' | 'COGNITO_IDENTITY_POOL' | 'CLIENT_ID' | 'ACCOUNT_SETTINGS' | 'ROLE_ALIAS' | 'IAM_ROLE' | 'ISSUER_CERTIFICATE' — The type of resource.
    - `resourceIdentifier` object — Information that identifies the resource.
      - `deviceCertificateId` string — The ID of the certificate attached to the resource.
      - `caCertificateId` string — The ID of the CA certificate used to authorize the certificate.
      - `cognitoIdentityPoolId` string — The ID of the Amazon Cognito identity pool.
      - `clientId` string — The client ID.
      - `policyVersionIdentifier` object — The version of the policy associated with the resource.
        - `policyName` string — The name of the policy.
        - `policyVersionId` string — The ID of the version of the policy associated with the resource.
      - `account` string — The account with which the resource is associated.
      - `iamRoleArn` string — The ARN of the IAM role that has overly permissive actions.
      - `roleAliasArn` string — The ARN of the role alias that has overly permissive actions.
      - `issuerCertificateIdentifier` object — The issuer certificate identifier.
        - `issuerCertificateSubject` string — The subject of the issuer certificate.
        - `issuerId` string — The issuer ID.
        - `issuerCertificateSerialNumber` string — The issuer certificate serial number.
      - `deviceCertificateArn` string — The ARN of the identified device certificate.
    - `additionalInfo` object — Other information about the resource.
  - `nextToken` string — A token that can be used to retrieve the next set of results, or <code>null</code> for the first API call.

## Other responses

- `480` — ResourceNotFoundException
- `481` — InvalidRequestException
- `482` — ThrottlingException
- `483` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)