LISTFINDINGS()`¶

About ListFindings¶

Retrieves a list of findings generated by the specified analyzer. ListFindings and ListFindingsV2 both use access-analyzer:ListFindings in the Action element of an IAM policy statement. You must have permission to perform the access-analyzer:ListFindings action.

To learn about filter keys that you can use to retrieve a list of findings, see IAM Access Analyzer filter keys in the IAM User Guide.

ListFindings is supported only for external access analyzers. You must use ListFindingsV2 for internal and unused access analyzers.

Method Signature¶

METHODS /AWS1/IF_AAN~LISTFINDINGS
  IMPORTING
    !IV_ANALYZERARN TYPE /AWS1/AANANALYZERARN OPTIONAL
    !IT_FILTER TYPE /AWS1/CL_AANCRITERION=>TT_FILTERCRITERIAMAP OPTIONAL
    !IO_SORT TYPE REF TO /AWS1/CL_AANSORTCRITERIA OPTIONAL
    !IV_NEXTTOKEN TYPE /AWS1/AANTOKEN OPTIONAL
    !IV_MAXRESULTS TYPE /AWS1/AANINTEGER OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_aanlistfindingsrsp
  RAISING
    /AWS1/CX_AANACCESSDENIEDEX
    /AWS1/CX_AANINTERNALSERVEREX
    /AWS1/CX_AANRESOURCENOTFOUNDEX
    /AWS1/CX_AANTHROTTLINGEX
    /AWS1/CX_AANVALIDATIONEX
    /AWS1/CX_AANCLIENTEXC
    /AWS1/CX_AANSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING¶

Required arguments:¶

`iv_analyzerarn` `TYPE /AWS1/AANANALYZERARN` `/AWS1/AANANALYZERARN`¶

The ARN of the analyzer to retrieve findings from.

Optional arguments:¶

`it_filter` `TYPE /AWS1/CL_AANCRITERION=>TT_FILTERCRITERIAMAP` `TT_FILTERCRITERIAMAP`¶

A filter to match for the findings to return.

`io_sort` `TYPE REF TO /AWS1/CL_AANSORTCRITERIA` `/AWS1/CL_AANSORTCRITERIA`¶

The sort order for the findings returned.

`iv_nexttoken` `TYPE /AWS1/AANTOKEN` `/AWS1/AANTOKEN`¶

A token used for pagination of results returned.

`iv_maxresults` `TYPE /AWS1/AANINTEGER` `/AWS1/AANINTEGER`¶

The maximum number of results to return in the response.

RETURNING¶

`oo_output` `TYPE REF TO /aws1/cl_aanlistfindingsrsp` `/AWS1/CL_AANLISTFINDINGSRSP`¶

Domain /AWS1/RT_ACCOUNT_ID

Primitive Type NUMC

Examples¶

Syntax Example¶

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->listfindings(
  io_sort = new /aws1/cl_aansortcriteria(
    iv_attributename = |string|
    iv_orderby = |string|
  )
  it_filter = VALUE /aws1/cl_aancriterion=>tt_filtercriteriamap(
    (
      VALUE /aws1/cl_aancriterion=>ts_filtercriteriamap_maprow(
        value = new /aws1/cl_aancriterion(
          it_contains = VALUE /aws1/cl_aanvaluelist_w=>tt_valuelist(
            ( new /aws1/cl_aanvaluelist_w( |string| ) )
          )
          it_eq = VALUE /aws1/cl_aanvaluelist_w=>tt_valuelist(
            ( new /aws1/cl_aanvaluelist_w( |string| ) )
          )
          it_neq = VALUE /aws1/cl_aanvaluelist_w=>tt_valuelist(
            ( new /aws1/cl_aanvaluelist_w( |string| ) )
          )
          iv_exists = ABAP_TRUE
        )
        key = |string|
      )
    )
  )
  iv_analyzerarn = |string|
  iv_maxresults = 123
  iv_nexttoken = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  LOOP AT lo_result->get_findings( ) into lo_row.
    lo_row_1 = lo_row.
    IF lo_row_1 IS NOT INITIAL.
      lv_findingid = lo_row_1->get_id( ).
      LOOP AT lo_row_1->get_principal( ) into ls_row_2.
        lv_key = ls_row_2-key.
        lo_value = ls_row_2-value.
        IF lo_value IS NOT INITIAL.
          lv_string = lo_value->get_value( ).
        ENDIF.
      ENDLOOP.
      LOOP AT lo_row_1->get_action( ) into lo_row_3.
        lo_row_4 = lo_row_3.
        IF lo_row_4 IS NOT INITIAL.
          lv_string = lo_row_4->get_value( ).
        ENDIF.
      ENDLOOP.
      lv_string = lo_row_1->get_resource( ).
      lv_boolean = lo_row_1->get_ispublic( ).
      lv_resourcetype = lo_row_1->get_resourcetype( ).
      LOOP AT lo_row_1->get_condition( ) into ls_row_5.
        lv_key = ls_row_5-key.
        lo_value_1 = ls_row_5-value.
        IF lo_value_1 IS NOT INITIAL.
          lv_string = lo_value_1->get_value( ).
        ENDIF.
      ENDLOOP.
      lv_timestamp = lo_row_1->get_createdat( ).
      lv_timestamp = lo_row_1->get_analyzedat( ).
      lv_timestamp = lo_row_1->get_updatedat( ).
      lv_findingstatus = lo_row_1->get_status( ).
      lv_string = lo_row_1->get_resourceowneraccount( ).
      lv_string = lo_row_1->get_error( ).
      LOOP AT lo_row_1->get_sources( ) into lo_row_6.
        lo_row_7 = lo_row_6.
        IF lo_row_7 IS NOT INITIAL.
          lv_findingsourcetype = lo_row_7->get_type( ).
          lo_findingsourcedetail = lo_row_7->get_detail( ).
          IF lo_findingsourcedetail IS NOT INITIAL.
            lv_string = lo_findingsourcedetail->get_accesspointarn( ).
            lv_string = lo_findingsourcedetail->get_accesspointaccount( ).
          ENDIF.
        ENDIF.
      ENDLOOP.
      lv_resourcecontrolpolicyre = lo_row_1->get_resrcctlplyrestriction( ).
    ENDIF.
  ENDLOOP.
  lv_token = lo_result->get_nexttoken( ).
ENDIF.

/AWS1/IF_AAN=>LISTFINDINGS()¶