/audit/findings
http://iot.{region}.amazonaws.com/audit/findings<p>Lists the findings (results) of a Device Defender audit or of the audits performed during a specified time period. (Findings are retained for 90 days.)</p> <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">ListAuditFindings</a> action.</p>
Query Params
Pagination limit
Pagination token
Body Params
A filter to limit results to the audit with the specified ID. You must specify either the taskId or the startTime and endTime, but not both.
A filter to limit results to those found before the specified time. You must specify either the startTime and endTime or the taskId, but not both.
An audit check name. Checks must be enabled for your account. (Use <code>DescribeAccountAuditConfiguration</code> to see the list of all checks, including those that are enabled or use <code>UpdateAccountAuditConfiguration</code> to select which checks are enabled.)
The token for the next set of results.
A filter to limit results to those found after the specified time. You must specify either the startTime and endTime or the taskId, but not both.
The maximum number of results to return at one time. The default is 25.
Information that identifies the noncompliant resource.
Boolean flag indicating whether only the suppressed findings or the unsuppressed findings should be listed. If this parameter isn't provided, the response will list both suppressed and unsuppressed findings.
Responses
{
"success": true,
"data": {
"id": "abc123",
"created_at": "2025-01-01T00:00:00Z"
}
}{
"success": false,
"error": {
"code": "VALIDATION_ERROR",
"message": "Invalid request parameters"
}
}1curl --request POST \2 --url 'http://iot.{region}.amazonaws.com/audit/findings' \3 --header 'accept: application/json' \4 --header 'content-type: application/json'1{2 "success": true,3 "data": {4 "id": "abc123",5 "created_at": "2025-01-01T00:00:00Z"6 }7}