---
title: "POST /UpdateFinding"
method: POST
path: "/UpdateFinding"
---

# POST /UpdateFinding

`POST /UpdateFinding`

Updates the status or risk level of a security finding.

## Request body

- object
  - `findingId` string, required — The unique identifier of the finding to update.
  - `agentSpaceId` string, required — The unique identifier of the agent space that contains the finding.
  - `name` string — The updated name for the finding.
  - `description` string — The updated description for the finding.
  - `riskType` string — The updated risk type for the finding.
  - `riskLevel` 'UNKNOWN' | 'INFORMATIONAL' | 'LOW' | 'MEDIUM' | 'HIGH' | 'CRITICAL' — Risk severity level.
  - `riskScore` string — The updated numerical risk score for the finding.
  - `attackScript` string — The updated attack script for the finding.
  - `reasoning` string — The updated reasoning for the finding.
  - `status` 'ACTIVE' | 'RESOLVED' | 'ACCEPTED' | 'FALSE_POSITIVE' — Finding status.
  - `customerNote` string — A customer-provided note on the finding.

## Response `200`

Success

- UpdateFindingOutput — Output for the UpdateFinding operation.

---

[API](https://skmtc.net/aws/apis/securityagent.md) · [All operations](https://skmtc.net/aws/apis/securityagent/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/securityagent/versions/cad56717d636/schema)