---
title: "Get Misconfigurations"
method: GET
path: "/security/v1/misconfigurations"
tags: ["Misconfiguration"]
---

# Get Misconfigurations

`GET /security/v1/misconfigurations`

This API returns the list of assets that have misconfigurations.

## Query parameters

- `cloud` 'aws' | 'azure', required — Enumeration of supported cloud providers.
- `accountId` string — A comma-separated list of cloud account IDs. For AWS this is the account ID. For Azure, this is the subscription ID.
- `notAccountId` string — A comma-separated list of cloud account IDs to exclude. For AWS this is the account ID. For Azure, this is the subscription ID.
- `accountName` string — A comma-separated list of cloud account names.
- `notAccountName` string — A comma-separated list of cloud account names to exclude
- `region` string — A comma-separated list of cloud regions.
- `notRegion` string — A comma-separated list of cloud regions to exclude.
- `date` string, date — The date the finding was most recently found (YYYY-MM-DD).
- `service` string — A comma-separated list of cloud services.
- `notService` string — A comma-separated list of cloud services to exclude.
- `assetType` string — A comma-separated list of cloud resources for the service.
- `notAssetType` string — A comma-separated list of cloud resources for the service to exclude.
- `ruleName` string — The unique name of the rule.
- `assetId` string — The asset's ID (a cloud resource).

## Parameters

- `#/paths/~1security~1v1~1compliances/get/parameters/0` — unresolved $ref
- `#/paths/~1security~1v1~1compliances/get/parameters/1` — unresolved $ref

## Response `200`

Successful Response

- object
  - `error` 0 — unresolved $ref
  - `request` Request, required — unresolved $ref
  - `response` object
    - `count` integer — The number of items.
    - `items` object[], required — The array of objects in this response. The length of the array is according to the 'count' attribute.
      - `organizationId` string, required — The Spot Organization ID.
      - `what` object, required
        - `args` string[], required — Certain misconfiguration rules have arguments. This field contains the arguments in the form of an comma separated array. Example: ["MongoDB", "TCP", "27017"]
        - `isSuppressed` boolean, required — If this finding is suppressed, the value is True.
        - `ruleDescription` string, required — Description of the rule.
        - `ruleName` string, required — The unique name of the rule.
        - `ruleTitle` string, required — The name of the rule.
        - `severity` string, required — The severity of the rule.
        - `state` string, required — The state of the misconfiguration. It is either open or closed.
      - `when` object, required
        - `lastSeen` string, required — The date the finding was most recently found (YYYY-MM-DD).
        - `suppressedAt` string, date-time, required — When the finding was suppressed.
      - `where` object, required
        - `accountId` string, required — A comma-separated list of cloud account IDs. For AWS this is the account ID. For Azure, this is the subscription ID.
        - `assetId` string, required — The asset's ID (a cloud resource).
        - `assetName` string, required — The name of the asset ID.
        - `assetType` string, required — A comma-separated list of cloud resources for the service.
        - `findingLocation` string, required — For a misconfiguration: the cloud resource or a subelement of the cloud resource. For a vulnerability: the cloud resource, an OS image, or a filename.
        - `region` string, required — A comma-separated list of cloud regions.
        - `service` string, required — The cloud service.
      - `who` object, required
        - `suppressedBy` string, required — The user who suppressed the finding.
    - `paginationInfo` PaginationInfo, required — unresolved $ref
    - `status` Status, required — unresolved $ref
  - `responseTime` number

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `422` — Validation Error

---

[API](https://skmtc.net/spot/apis/spot-by-flexera-api.md) · [All operations](https://skmtc.net/spot/apis/spot-by-flexera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/spot/spot-by-flexera-api/revisions/72813baf8d47/schema)