Need Help with Aws Cli Command for INSPECTOR 2 Report

Question

Hi I am trying to get a Report of INSPECTOR 2 in CSV Format with only ACTIVE Findings, some how I am not able to, 
but I am getting the report with All Findings which is a huge file
The command I am using --
aws inspector2 create-findings-report --report-format CSV --s3-destination bucketName=inspector-scan-report-$env,keyPrefix=$today_date,kmsKeyArn=arn:aws:kms:us-east-1:.....

But I need this command to get only ACTIVE Findings, Can some one please help me with this, Thank you

Accepted Answer

Hi,

You can try to use the filter criteria like that shown below:
```
aws inspector2 create-findings-report --filter-criteria '{"findingStatus" : [{"comparison" : "EQUALS", "value": "ACTIVE"}]}'  --report-format CSV --s3-destination bucketName=-$env,keyPrefix=$today_date,kmsKeyArn=arn:aws:kms:us-east-1 ....
```

Need Help with Aws Cli Command for INSPECTOR 2 Report

Relevanter Inhalt