External DocumentationTo learn more, visit the Lacework documentation.
Parameters
| Parameter | Description |
|---|---|
| Primary Query ID | The primary ID that is used to fetch the report, for example, AWS Account ID or Azure Tenant ID. |
| Report Type | The name of the report type in API format. |
| Secondary Query ID | The secondary ID that is used to fetch the report; for example, GCP Project ID or Azure Subscription ID. |
Example Output
{
"data": [
{
"reportType": "AWS CIS Benchmark and S3",
"reportTitle": "AWS CIS Benchmark and S3",
"recommendations": [
{
"ACCOUNT_ID": "24903813429804",
"ACCOUNT_ALIAS": "aws-account",
"START_TIME": 1648833313141,
"SUPPRESSIONS": [
"suppressions"
],
"INFO_LINK": "https://info-link.net/info/link",
"ASSESSED_RESOURCE_COUNT": 627,
"STATUS": "NonCompliant",
"REC_ID": "LW_S3_1",
"CATEGORY": "S3",
"SERVICE": "aws:s3",
"TITLE": "Ensure the S3 bucket ACL does not grant 'Everyone' READ permission [list S3 objects]",
"VIOLATIONS": [
{
"reasons": [
"ReadAccessGranted"
],
"resource": "arn:aws:s3:::eco-s3-acl-aws"
},
{
"reasons": [
"ReadAccessGranted"
],
"resource": "arn:aws:s3:::ecosystem-s3-acl-aws"
}
],
"RESOURCE_COUNT": 632,
"SEVERITY": 1
}
],
"summary": [
{
"NUM_RECOMMENDATIONS": 160,
"NUM_SEVERITY_2_NON_COMPLIANCE": 60,
"NUM_SEVERITY_4_NON_COMPLIANCE": 4,
"NUM_SEVERITY_1_NON_COMPLIANCE": 23,
"NUM_COMPLIANT": 35,
"NUM_SEVERITY_3_NON_COMPLIANCE": 18,
"ASSESSED_RESOURCE_COUNT": 88129,
"NUM_SUPPRESSED": 0,
"NUM_SEVERITY_5_NON_COMPLIANCE": 1,
"NUM_NOT_COMPLIANT": 106,
"VIOLATED_RESOURCE_COUNT": 15823,
"SUPPRESSED_RESOURCE_COUNT": 0
}
],
"accountId": "24903813429804",
"accountAlias": "aws-account",
"reportTime": "2022-04-01T17:15:13.141Z"
}
]
}
Workflow Library Example
Get Reports with Lacework and Send Results Via Email