The Findings API from Amazon Inspector — 4 operation(s) for findings.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/amazon-inspector-findings-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
version: 1.0.0
x-release: v4
title: Inspector2 Accountpermissions Findings API
description: Amazon Inspector is a vulnerability discovery service that automates continuous scanning for security vulnerabilities within your Amazon EC2 and Amazon ECR environments.
x-logo:
url: https://twitter.com/awscloud/profile_image?size=original
backgroundColor: '#FFFFFF'
termsOfService: https://aws.amazon.com/service-terms/
contact:
name: Mike Ralphson
email: mike.ralphson@gmail.com
url: https://github.com/mermade/aws2openapi
x-twitter: PermittedSoc
license:
name: Apache 2.0 License
url: http://www.apache.org/licenses/
x-providerName: amazonaws.com
x-serviceName: inspector2
x-aws-signingName: inspector2
x-origin:
- contentType: application/json
url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/inspector2-2020-06-08.normal.json
converter:
url: https://github.com/mermade/aws2openapi
x-apisguru-driver: external
x-apiClientRegistration:
url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct
x-apisguru-categories:
- cloud
x-preferred: true
servers:
- url: http://inspector2.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Inspector2 multi-region endpoint
- url: https://inspector2.{region}.amazonaws.com
variables:
region:
description: The AWS region
enum:
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- us-gov-west-1
- us-gov-east-1
- ca-central-1
- eu-north-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-central-1
- eu-south-1
- af-south-1
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-southeast-1
- ap-southeast-2
- ap-east-1
- ap-south-1
- sa-east-1
- me-south-1
default: us-east-1
description: The Inspector2 multi-region endpoint
- url: http://inspector2.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Inspector2 endpoint for China (Beijing) and China (Ningxia)
- url: https://inspector2.{region}.amazonaws.com.cn
variables:
region:
description: The AWS region
enum:
- cn-north-1
- cn-northwest-1
default: cn-north-1
description: The Inspector2 endpoint for China (Beijing) and China (Ningxia)
security:
- hmac: []
tags:
- name: Findings
paths:
/findings/details/batch/get:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
post:
operationId: BatchGetFindingDetails
description: Gets vulnerability details for findings.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/BatchGetFindingDetailsResponse'
'480':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
'481':
description: AccessDeniedException
content:
application/json:
schema:
$ref: '#/components/schemas/AccessDeniedException'
'482':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'483':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters: []
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- findingArns
properties:
findingArns:
description: A list of finding ARNs.
type: array
items:
$ref: '#/components/schemas/FindingArn'
minItems: 1
maxItems: 10
summary: Amazon Inspector Batch Get Finding Details
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
tags:
- Findings
/findings/aggregation/list:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
post:
operationId: ListFindingAggregations
description: Lists aggregated finding data for your environment based on specific criteria.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ListFindingAggregationsResponse'
'480':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
'481':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'482':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters:
- name: maxResults
in: query
schema:
type: string
description: Pagination limit
required: false
- name: nextToken
in: query
schema:
type: string
description: Pagination token
required: false
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- aggregationType
properties:
accountIds:
description: The Amazon Web Services account IDs to retrieve finding aggregation data for.
type: array
items:
$ref: '#/components/schemas/StringFilter'
minItems: 1
maxItems: 10
aggregationRequest:
description: Contains details about an aggregation request.
type: object
properties:
accountAggregation:
allOf:
- $ref: '#/components/schemas/AccountAggregation'
- description: An object that contains details about an aggregation request based on Amazon Web Services account IDs.
amiAggregation:
allOf:
- $ref: '#/components/schemas/AmiAggregation'
- description: An object that contains details about an aggregation request based on Amazon Machine Images (AMIs).
awsEcrContainerAggregation:
allOf:
- $ref: '#/components/schemas/AwsEcrContainerAggregation'
- description: An object that contains details about an aggregation request based on Amazon ECR container images.
ec2InstanceAggregation:
allOf:
- $ref: '#/components/schemas/Ec2InstanceAggregation'
- description: An object that contains details about an aggregation request based on Amazon EC2 instances.
findingTypeAggregation:
allOf:
- $ref: '#/components/schemas/FindingTypeAggregation'
- description: An object that contains details about an aggregation request based on finding types.
imageLayerAggregation:
allOf:
- $ref: '#/components/schemas/ImageLayerAggregation'
- description: An object that contains details about an aggregation request based on container image layers.
lambdaFunctionAggregation:
allOf:
- $ref: '#/components/schemas/LambdaFunctionAggregation'
- description: Returns an object with findings aggregated by AWS Lambda function.
lambdaLayerAggregation:
allOf:
- $ref: '#/components/schemas/LambdaLayerAggregation'
- description: Returns an object with findings aggregated by AWS Lambda layer.
packageAggregation:
allOf:
- $ref: '#/components/schemas/PackageAggregation'
- description: An object that contains details about an aggregation request based on operating system package type.
repositoryAggregation:
allOf:
- $ref: '#/components/schemas/RepositoryAggregation'
- description: An object that contains details about an aggregation request based on Amazon ECR repositories.
titleAggregation:
allOf:
- $ref: '#/components/schemas/TitleAggregation'
- description: An object that contains details about an aggregation request based on finding title.
aggregationType:
description: The type of the aggregation request.
type: string
enum:
- FINDING_TYPE
- PACKAGE
- TITLE
- REPOSITORY
- AMI
- AWS_EC2_INSTANCE
- AWS_ECR_CONTAINER
- IMAGE_LAYER
- ACCOUNT
- AWS_LAMBDA_FUNCTION
- LAMBDA_LAYER
maxResults:
description: The maximum number of results to return in the response.
type: integer
minimum: 1
maximum: 100
nextToken:
description: A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
type: string
minLength: 0
maxLength: 1000000
summary: Amazon Inspector List Finding Aggregations
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
tags:
- Findings
/findings/list:
parameters:
- $ref: '#/components/parameters/X-Amz-Content-Sha256'
- $ref: '#/components/parameters/X-Amz-Date'
- $ref: '#/components/parameters/X-Amz-Algorithm'
- $ref: '#/components/parameters/X-Amz-Credential'
- $ref: '#/components/parameters/X-Amz-Security-Token'
- $ref: '#/components/parameters/X-Amz-Signature'
- $ref: '#/components/parameters/X-Amz-SignedHeaders'
post:
operationId: ListFindings
description: Lists findings for your environment.
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ListFindingsResponse'
'480':
description: ValidationException
content:
application/json:
schema:
$ref: '#/components/schemas/ValidationException'
'481':
description: ThrottlingException
content:
application/json:
schema:
$ref: '#/components/schemas/ThrottlingException'
'482':
description: InternalServerException
content:
application/json:
schema:
$ref: '#/components/schemas/InternalServerException'
parameters:
- name: maxResults
in: query
schema:
type: string
description: Pagination limit
required: false
- name: nextToken
in: query
schema:
type: string
description: Pagination token
required: false
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
filterCriteria:
description: Details on the criteria used to define the filter.
type: object
properties:
awsAccountId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon Web Services account IDs used to filter findings.
codeVulnerabilityDetectorName:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: The name of the detector used to identify a code vulnerability in a Lambda function used to filter findings.
codeVulnerabilityDetectorTags:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: 'The detector type tag associated with the vulnerability used to filter findings. Detector tags group related vulnerabilities by common themes or tactics. For a list of available tags by programming language, see <a href="https://docs.aws.amazon.com/codeguru/detector-library/java/tags/">Java tags</a>, or <a href="https://docs.aws.amazon.com/codeguru/detector-library/python/tags/">Python tags</a>. '
codeVulnerabilityFilePath:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: The file path to the file in a Lambda function that contains a code vulnerability used to filter findings.
componentId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the component IDs used to filter findings.
componentType:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the component types used to filter findings.
ec2InstanceImageId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon EC2 instance image IDs used to filter findings.
ec2InstanceSubnetId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon EC2 instance subnet IDs used to filter findings.
ec2InstanceVpcId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon EC2 instance VPC IDs used to filter findings.
ecrImageArchitecture:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon ECR image architecture types used to filter findings.
ecrImageHash:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details of the Amazon ECR image hashes used to filter findings.
ecrImagePushedAt:
allOf:
- $ref: '#/components/schemas/DateFilterList'
- description: Details on the Amazon ECR image push date and time used to filter findings.
ecrImageRegistry:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the Amazon ECR registry used to filter findings.
ecrImageRepositoryName:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the name of the Amazon ECR repository used to filter findings.
ecrImageTags:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: The tags attached to the Amazon ECR container image.
epssScore:
allOf:
- $ref: '#/components/schemas/NumberFilterList'
- description: The EPSS score used to filter findings.
exploitAvailable:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Filters the list of AWS Lambda findings by the availability of exploits.
findingArn:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the finding ARNs used to filter findings.
findingStatus:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the finding status types used to filter findings.
findingType:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the finding types used to filter findings.
firstObservedAt:
allOf:
- $ref: '#/components/schemas/DateFilterList'
- description: Details on the date and time a finding was first seen used to filter findings.
fixAvailable:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>. A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.
inspectorScore:
allOf:
- $ref: '#/components/schemas/NumberFilterList'
- description: The Amazon Inspector score to filter on.
lambdaFunctionExecutionRoleArn:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Filters the list of AWS Lambda functions by execution role.
lambdaFunctionLastModifiedAt:
allOf:
- $ref: '#/components/schemas/DateFilterList'
- description: 'Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a> '
lambdaFunctionLayers:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Filters the list of AWS Lambda functions by the function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html"> layers</a>. A Lambda function can have up to five layers.
lambdaFunctionName:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Filters the list of AWS Lambda functions by the name of the function.
lambdaFunctionRuntime:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.
lastObservedAt:
allOf:
- $ref: '#/components/schemas/DateFilterList'
- description: Details on the date and time a finding was last seen used to filter findings.
networkProtocol:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on network protocol used to filter findings.
portRange:
allOf:
- $ref: '#/components/schemas/PortRangeFilterList'
- description: Details on the port ranges used to filter findings.
relatedVulnerabilities:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the related vulnerabilities used to filter findings.
resourceId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the resource IDs used to filter findings.
resourceTags:
allOf:
- $ref: '#/components/schemas/MapFilterList'
- description: Details on the resource tags used to filter findings.
resourceType:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the resource types used to filter findings.
severity:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the severity used to filter findings.
title:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the finding title used to filter findings.
updatedAt:
allOf:
- $ref: '#/components/schemas/DateFilterList'
- description: Details on the date and time a finding was last updated at used to filter findings.
vendorSeverity:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the vendor severity used to filter findings.
vulnerabilityId:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the vulnerability ID used to filter findings.
vulnerabilitySource:
allOf:
- $ref: '#/components/schemas/StringFilterList'
- description: Details on the vulnerability type used to filter findings.
vulnerablePackages:
allOf:
- $ref: '#/components/schemas/PackageFilterList'
- description: Details on the vulnerable packages used to filter findings.
maxResults:
description: The maximum number of results to return in the response.
type: integer
minimum: 1
maximum: 100
nextToken:
description: A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
type: string
minLength: 0
maxLength: 1000000
sortCriteria:
description: Details about the criteria used to sort finding results.
type: object
properties:
field:
allOf:
- $ref: '#/components/schemas/SortField'
- description: The finding detail field by which results are sorted.
sortOrder:
allOf:
- $ref: '#/components/schemas/SortOrder'
- description: The order by which findings are sorted.
summary: Amazon Inspector List Findings
x-microcks-operation:
delay: 0
dispatcher: FALLBACK
tags:
- Findings
/findings/get:
post:
operationId: GetFindingsReportStatus
summary: Amazon Inspector Get findings report status
description: Gets the status of a findings report.
tags:
- Findings
responses:
'200':
description: Report status
components:
schemas:
String:
type: string
ValidationException: {}
AwsEcrContainerSortBy:
type: string
enum:
- CRITICAL
- HIGH
- ALL
ExecutionRoleArn:
type: string
pattern: ^arn:(aws[a-zA-Z-]*)?:iam::\d{12}:role/?[a-zA-Z_0-9+=,.@\-_/]+$
EvidenceRule:
type: string
minLength: 0
FindingTypeSortBy:
type: string
enum:
- CRITICAL
- HIGH
- ALL
CvssScoreAdjustment:
type: object
required:
- metric
- reason
properties:
metric:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The metric used to adjust the CVSS score.
reason:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The reason the CVSS score has been adjustment.
description: Details on adjustments Amazon Inspector made to the CVSS score for a finding.
LambdaFunctionAggregationResponse:
type: object
required:
- resourceId
properties:
accountId:
allOf:
- $ref: '#/components/schemas/AccountId'
- description: 'The ID of the AWS account that owns the AWS Lambda function. '
functionName:
allOf:
- $ref: '#/components/schemas/String'
- description: The AWS Lambda function names included in the aggregation results.
lambdaTags:
allOf:
- $ref: '#/components/schemas/TagMap'
- description: The tags included in the aggregation results.
lastModifiedAt:
allOf:
- $ref: '#/components/schemas/DateTimeTimestamp'
- description: The date that the AWS Lambda function included in the aggregation results was last changed.
resourceId:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The resource IDs included in the aggregation results.
runtime:
allOf:
- $ref: '#/components/schemas/String'
- description: The runtimes included in the aggregation results.
severityCounts:
$ref: '#/components/schemas/SeverityCounts'
description: A response that contains the results of an AWS Lambda function finding aggregation.
EvidenceDetail:
type: string
minLength: 0
ListFindingsResponse:
type: object
properties:
findings:
allOf:
- $ref: '#/components/schemas/FindingList'
- description: Contains details on the findings in your environment.
nextToken:
allOf:
- $ref: '#/components/schemas/NextToken'
- description: A token to use for paginating results that are returned in the response. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the <code>NextToken</code> value returned from the previous request to continue listing results after the first page.
ImageLayerAggregationResponse:
type: object
required:
- accountId
- layerHash
- repository
- resourceId
properties:
accountId:
allOf:
- $ref: '#/components/schemas/AccountId'
- description: The ID of the Amazon Web Services account that owns the container image hosting the layer image.
layerHash:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The layer hash.
repository:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The repository the layer resides in.
resourceId:
allOf:
- $ref: '#/components/schemas/NonEmptyString'
- description: The resource ID of the container image layer.
severityCounts:
allOf:
- $ref: '#/components/schemas/SeverityCounts'
- description: An object that represents the count of matched findings per severity.
description: A response that contains the results of a finding aggregation by image layer.
BatchGetFindingDetailsResponse:
type: object
properties:
errors:
allOf:
- $ref: '#/components/schemas/FindingDetailsErrorList'
- description: Error information for findings that details could not be returned for.
findingDetails:
allOf:
- $ref: '#/components/schemas/FindingDetails'
- description: A finding's vulnerability details.
Runtime:
type: string
enum:
- NODEJS
- NODEJS_12_X
- NODEJS_14_X
- NODEJS_16_X
- JAVA_8
- JAVA_8_AL2
- JAVA_11
- PYTHON_3_7
- PYTHON_3_8
- PYTHON_3_9
- UNSUPPORTED
- NODEJS_18_X
- GO_1_X
- JAVA_17
- PYTHON_3_10
CweList:
type: array
items:
$ref: '#/components/schemas/NonEmptyString'
minItems: 1
maxItems: 10
EpssDetails:
type: object
properties:
score:
allOf:
- $ref: '#/components/schemas/EpssScoreValue'
- description: The EPSS score.
description: Details about the Exploit Prediction Scoring System (EPSS) score for a finding.
FindingStatus:
type: string
enum:
- ACTIVE
- SUPPRESSED
- CLOSED
PortRangeFilterList:
type: array
items:
$ref: '#/components/schemas/PortRangeFilter'
minItems: 1
maxItems: 10
VulnerabilityIdList:
type: array
items:
$ref: '#/components/schemas/VulnerabilityId'
VulnerabilityReferenceUrls:
type: array
items:
$ref: '#/components/schemas/VulnerabilityReferenceUrl'
minItems: 0
maxItems: 100
AccountAggregation:
type: object
properties:
findingType:
allOf:
- $ref: '#/components/schemas/AggregationFindingType'
- description: The type of finding.
resourceType:
allOf:
- $ref: '#/components/schemas/AggregationResourceType'
- description: The type of resource.
sortBy:
allOf:
- $ref: '#/components/schemas/AccountSortBy'
- d
# --- truncated at 32 KB (97 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-inspector/refs/heads/main/openapi/amazon-inspector-findings-api-openapi.yml