Skip to main content

Get Reports

Get a specific report.

External Documentation

To learn more, visit the Lacework documentation.

Parameters

ParameterDescription
Primary Query IDThe primary ID that is used to fetch the report, for example, AWS Account ID or Azure Tenant ID.
Report TypeThe name of the report type in API format.
Secondary Query IDThe secondary ID that is used to fetch the report; for example, GCP Project ID or Azure Subscription ID.

Example Output

{
"data": [
{
"reportType": "AWS CIS Benchmark and S3",
"reportTitle": "AWS CIS Benchmark and S3",
"recommendations": [
{
"ACCOUNT_ID": "24903813429804",
"ACCOUNT_ALIAS": "aws-account",
"START_TIME": 1648833313141,
"SUPPRESSIONS": [
"suppressions"
],
"INFO_LINK": "https://info-link.net/info/link",
"ASSESSED_RESOURCE_COUNT": 627,
"STATUS": "NonCompliant",
"REC_ID": "LW_S3_1",
"CATEGORY": "S3",
"SERVICE": "aws:s3",
"TITLE": "Ensure the S3 bucket ACL does not grant 'Everyone' READ permission [list S3 objects]",
"VIOLATIONS": [
{
"reasons": [
"ReadAccessGranted"
],
"resource": "arn:aws:s3:::eco-s3-acl-aws"
},
{
"reasons": [
"ReadAccessGranted"
],
"resource": "arn:aws:s3:::ecosystem-s3-acl-aws"
}
],
"RESOURCE_COUNT": 632,
"SEVERITY": 1
}
],
"summary": [
{
"NUM_RECOMMENDATIONS": 160,
"NUM_SEVERITY_2_NON_COMPLIANCE": 60,
"NUM_SEVERITY_4_NON_COMPLIANCE": 4,
"NUM_SEVERITY_1_NON_COMPLIANCE": 23,
"NUM_COMPLIANT": 35,
"NUM_SEVERITY_3_NON_COMPLIANCE": 18,
"ASSESSED_RESOURCE_COUNT": 88129,
"NUM_SUPPRESSED": 0,
"NUM_SEVERITY_5_NON_COMPLIANCE": 1,
"NUM_NOT_COMPLIANT": 106,
"VIOLATED_RESOURCE_COUNT": 15823,
"SUPPRESSED_RESOURCE_COUNT": 0
}
],
"accountId": "24903813429804",
"accountAlias": "aws-account",
"reportTime": "2022-04-01T17:15:13.141Z"
}
]
}

Workflow Library Example

Get Reports with Lacework and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop