---
title: "Search Compliance Evaluations"
method: POST
path: "/api/v2/Configs/ComplianceEvaluations/search"
tags: ["Configs"]
---

# Search Compliance Evaluations

`POST /api/v2/Configs/ComplianceEvaluations/search`

Search for compliance evaluations (with details such as compliance status, violated resources, reason, recommendation, account info, etc.) for a specified cloud provider within the last 90 days by invoking the following endpoint:

  > `POST https://YourAccount.lacework.net/api/v2/Configs/ComplianceEvaluations/search` 

 The search results include details about compliance violations identified by cloud assessments for all supported and configured cloud provider types: AWS, Azure, and GCP.

 FortiCNAPP highly recommends specifying a time range. Without a specified time range, the request uses the default time range of 24 hours prior to the current time. The maximum time range per API request is 7 days. 

 You must specify a dataset. The possible datasets are `AwsCompliance`, `AzureCompliance`, `GcpCompliance`, and `K8sCompliance`. You can optionally filter the compliance evaluations by report time, account, section, ID, and more. For more information, see [CLOUD_COMPLIANCE_V View](https://docs.fortinet.com/document/forticnapp/latest/administration-guide/456112/cloud-compliance-v-view).

 Here are some example `body` payloads: 
 * `{ "timeFilter": { "startTime": "2021-08-28T20:30:00Z", "endTime": "2021-08-28T22:30:00Z"},` 
 `"dataset": "AwsCompliance" }` 
 * `{ "timeFilter": { "startTime": "2021-08-28T20:30:00Z", "endTime": "2021-08-28T22:30:00Z"},`
 `"filters": [ { "field": "status", "expression": "eq", "value": "NonCompliant" }, { "field": "account.AccountId", "expression": "eq", "value": "812212113623" } ],`  
 `"returns": [ "account", "id", "recommendation", "severity", "status" ],`  
 `"dataset": "AzureCompliance" }`

## Headers

- `Authorization` string, required
- `Content-Type` string, required

## Request body

- DatasetRequestBodySchema
  - `timeFilter` object — The date/time range during which actions occurred.
    - `startTime` string — Returns only recorded actions that occurred after this timestamp.
    - `endTime` string — Returns only recorded actions that occurred before this timestamp. If empty or missing, the current time is used.
  - `filters` object[] — One or more condition statements you can use to refine the data returned by the request. Only records that satisfy filtering conditions are returned. If there are multiple conditions, a record must satisfy all conditions for a match.
    - `expression` 'eq' | 'ne' | 'in' | 'not_in' | 'like' | 'ilike' | 'not_like' | 'not_ilike' | 'not_rlike' | 'rlike' | 'gt' | 'ge' | 'lt' | 'le' | 'between', required — The comparison operator for the filter condition.
    - `field` string, required — The name of the data field to which the condition applies.
    - `value` string — The value that the condition checks for in the specified field. Use this attribute when specifying a single value.
    - `values` string[] — The values that the condition checks for in the specified field. Use this attribute when specifying multiple values.
  - `returns` string[] — Use this attribute to specify which top-level fields of the response schema you want to receive.
  - `dataset` 'AwsCompliance' | 'AzureCompliance' | 'GcpCompliance' | 'K8sCompliance', required

## Response `200`

No Error (List of Compliance Evaluations)

- object
  - `paging` PagingSchema — Details of the response's pagination
    - `rows` number — The number of rows displayed on each page
    - `totalRows` number — The number of rows returned from the query
    - `urls` object — Pagination-related URLs
      - `nextPage` string — The next page's URL
  - `data` ConfigsComplianceEvaluationsResponseSchema[]
    - `account` object
    - `evalType` string
    - `id` string
    - `reason` string
    - `recommendation` string
    - `region` string
    - `reportTime` string
    - `resource` string
    - `section` string
    - `severity` string
    - `status` string

## Other responses

- `204` — No Data
- `4XX` — Client Error
- `5XX` — Internal Server Error

---

[API](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation.md) · [All operations](https://skmtc.net/lacework/apis/forticnapp-api-2-0-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lacework/forticnapp-api-2-0-documentation/versions/7015f76895f2/schema)