aws-inspector-cis-scan-report-output
CIS scan reports expose host configuration, control failures, resource identifiers, and potentially sensitive operating-system details through a download URL.
Where it sits
| location | GetCisScanReport.url -> PDF/CSV report |
|---|---|
| location kind | output_value |
| data kinds | pii sensitive_data customer_data |
| emits edge | CanReadData |
| service | Inspector (aws:inspector) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetCisScanReport |
| response path | url -> report bytes |
| encoding | binary |
| params | {"reportFormat": "\u003cPDF|CSV\u003e", "scanArn": "\u003cscan-arn\u003e"} |
Required permissions
inspector2:GetCisScanReport