AWS Builder Center: Learn, Build and Connect with builders in the AWS community

AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.

Need Help with Aws Cli Command for INSPECTOR 2 Report

Hi I am trying to get a Report of INSPECTOR 2 in CSV Format with only ACTIVE Findings, some how I am not able to, but I am getting the report with All Findings which is a huge file The command I am using -- aws inspector2 create-findings-report --report-format CSV --s3-destination bucketName=inspector-scan-report-$env,keyPrefix=$today_date,kmsKeyArn=arn:aws:kms:us-east-1:.....

But I need this command to get only ACTIVE Findings, Can some one please help me with this, Thank you

Topics: DevOps Security, Identity, & Compliance
Tags: Amazon Inspector DevOps Security, Identity, & Compliance
Language: English

RGADA

asked 4 years ago4K views

1 Answer

Newest
Most votes
Most comments

Are these answers helpful? Upvote the correct answer to help the community benefit from your knowledge.

Accepted Answer

Hi,

You can try to use the filter criteria like that shown below:

aws inspector2 create-findings-report --filter-criteria '{"findingStatus" : [{"comparison" : "EQUALS", "value": "ACTIVE"}]}'  --report-format CSV --s3-destination bucketName=<bucketname>-$env,keyPrefix=$today_date,kmsKeyArn=arn:aws:kms:us-east-1 ....