Skip to main content

GuardDuty List Findings

Lists Amazon GuardDuty findings for the specified detector ID.

External Documentation

To learn more, visit the AWS documentation.

Basic Parameters

ParameterDescription
AWS Region(s)Enter the desired AWS Region(s).

To execute the action in multiple regions, provide a comma-separated list.
For example: us-east-1,eu-west-2.

If you wish to run the action in all available regions, use the asterisk symbol (*) instead.
Detector IDThe ID of the detector that specifies the GuardDuty service whose findings you want to list.

Advanced Parameters

ParameterDescription
Disable XML To JSON Auto ConvertWhen checked, XML responses are not automatically converted into JSON format.
Max ResultsIndicates the maximum number of items you want in the response.
The default value is 50.
The maximum value is 50.
Next TokenYou can use this parameter when paginating results.
For subsequent calls to the action, fill nextToken in the request with the value of nextToken from the previous response to continue listing data.
Order ByThe order by which the sorted findings are to be displayed.
Sort ByRepresents the finding attribute (for example, accountId) to sort findings by.

Example Output

{
"FindingIds": [
"string"
],
"NextToken": "string"
}

Automation Library Example

Guardduty List Findings with Aws and Send Results Via Email

Automation LibraryPreview this Automation on desktop