v50

latestOpenAPI 3.0.0raw.githubusercontent.com2026-06-15367117899.6 KB

CloudSecurity

Mark a finding as an exception so it no longer appears in the active Scan Results list

Accepts session, API key, or service token auth. For API key / service token callers without an explicit user attribution, the action is attributed to the org's owner and the audit log description records the calling key/service name.

post/v1/cloud-security/findings/{findingId}/exception

Path parameters

findingIdstring required

Request body

reasonstring required

Documentation for why this finding does not apply or is being accepted. Minimum 20 non-whitespace characters.

reviewedBystring

Free-text reviewer or approval reference.

expiresAtstring

ISO date when this exception should auto-expire. Null/missing = never.

Example request

{
  "reason": "Bucket hosts intentionally public marketing assets; writes restricted to the marketing IAM role.",
  "reviewedBy": "Approved by CISO 2026-Q1",
  "expiresAt": "2026-08-13"
}