---
title: "GET /mitigationactions/actions/{actionName}"
method: GET
path: "/mitigationactions/actions/{actionName}"
---

# GET /mitigationactions/actions/{actionName}

`GET /mitigationactions/actions/{actionName}`

Gets information about a mitigation action.

Requires permission to access the [DescribeMitigationAction](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Path parameters

- `actionName` string, required

## Response `200`

Success

- DescribeMitigationActionResponse
  - `actionName` string — The friendly name that uniquely identifies the mitigation action.
  - `actionType` 'UPDATE_DEVICE_CERTIFICATE' | 'UPDATE_CA_CERTIFICATE' | 'ADD_THINGS_TO_THING_GROUP' | 'REPLACE_DEFAULT_POLICY_VERSION' | 'ENABLE_IOT_LOGGING' | 'PUBLISH_FINDING_TO_SNS' — The type of mitigation action.
  - `actionArn` string — The ARN that identifies this migration action.
  - `actionId` string — A unique identifier for this action.
  - `roleArn` string — The ARN of the IAM role used to apply this action.
  - `actionParams` object — Parameters that control how the mitigation action is applied, specific to the type of mitigation action.
    - `updateDeviceCertificateParams` object — Parameters to define a mitigation action that changes the state of the device certificate to inactive.
      - `action` 'DEACTIVATE', required — The action that you want to apply to the device certificate. The only supported value is <code>DEACTIVATE</code>.
    - `updateCACertificateParams` object — Parameters to define a mitigation action that changes the state of the CA certificate to inactive.
      - `action` 'DEACTIVATE', required — The action that you want to apply to the CA certificate. The only supported value is <code>DEACTIVATE</code>.
    - `addThingsToThingGroupParams` object — Parameters to define a mitigation action that moves devices associated with a certificate to one or more specified thing groups, typically for quarantine.
      - `thingGroupNames` ThingGroupName[], required — The list of groups to which you want to add the things that triggered the mitigation action. You can add a thing to a maximum of 10 groups, but you can't add a thing to more than one group in the same hierarchy.
      - `overrideDynamicGroups` boolean — Specifies if this mitigation action can move the things that triggered the mitigation action even if they are part of one or more dynamic thing groups.
    - `replaceDefaultPolicyVersionParams` object — Parameters to define a mitigation action that adds a blank policy to restrict permissions.
      - `templateName` 'BLANK_POLICY', required — The name of the template to be applied. The only supported value is <code>BLANK_POLICY</code>.
    - `enableIoTLoggingParams` object — Parameters to define a mitigation action that enables Amazon Web Services IoT Core logging at a specified level of detail.
      - `roleArnForLogging` string, required — The Amazon Resource Name (ARN) of the IAM role used for logging.
      - `logLevel` 'DEBUG' | 'INFO' | 'ERROR' | 'WARN' | 'DISABLED', required — Specifies the type of information to be logged.
    - `publishFindingToSnsParams` object — Parameters to define a mitigation action that publishes findings to Amazon Simple Notification Service (Amazon SNS. You can implement your own custom actions in response to the Amazon SNS messages.
      - `topicArn` string, required — The ARN of the topic to which you want to publish the findings.
  - `creationDate` string, date-time — The date and time when the mitigation action was added to your Amazon Web Services accounts.
  - `lastModifiedDate` string, date-time — The date and time when the mitigation action was last changed.

## Other responses

- `480` — InvalidRequestException
- `481` — ResourceNotFoundException
- `482` — ThrottlingException
- `483` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/versions/deef5c4b09f0/schema)