Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-142381,278956.3 KB

Lists the findings (results) of a Device Defender audit or of the audits performed during a specified time period. (Findings are retained for 90 days.)

Requires permission to access the ListAuditFindings action.

post/audit/findings

Query parameters

maxResultsstring

Pagination limit

nextTokenstring

Pagination token

Request body

taskIdstring

A filter to limit results to the audit with the specified ID. You must specify either the taskId or the startTime and endTime, but not both.

checkNamestring

An audit check name. Checks must be enabled for your account. (Use <code>DescribeAccountAuditConfiguration</code> to see the list of all checks, including those that are enabled or use <code>UpdateAccountAuditConfiguration</code> to select which checks are enabled.)

maxResultsinteger

The maximum number of results to return at one time. The default is 25.

nextTokenstring

The token for the next set of results.

startTimestring date-time

A filter to limit results to those found after the specified time. You must specify either the startTime and endTime or the taskId, but not both.

endTimestring date-time

A filter to limit results to those found before the specified time. You must specify either the startTime and endTime or the taskId, but not both.

listSuppressedFindingsboolean

Boolean flag indicating whether only the suppressed findings or the unsuppressed findings should be listed. If this parameter isn't provided, the response will list both suppressed and unsuppressed findings.

Response

Success

nextTokenstring

A token that can be used to retrieve the next set of results, or <code>null</code> if there are no additional results.