aws-accessanalyzer-finding-details-metadata
Access Analyzer findings expose external principals, resource ARNs, policy conditions, CloudTrail access identities, and account relationships; they do not include secret key material.
Where it sits
| location | GetFindingV2.findingDetails / resource / resourceOwnerAccount |
|---|---|
| location kind | data_record |
| data kinds | access_key pii sensitive_data |
| emits edge | CanReadData |
| service | IAM Access Analyzer (aws:accessanalyzer) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetFindingV2 |
| response path | findingDetails / resource / resourceOwnerAccount |
| encoding | json |
| params | {"analyzerArn": "\u003canalyzer-arn\u003e", "id": "\u003cfinding-id\u003e"} |
Required permissions
access-analyzer:GetFinding