Review Insight Findings

Review Insight Findings

Fetch an insight definition, then query the findings behind it.

1. Retrieve the saved insight by ARN so its filter and grouping attribute can be read before drilling into the findings it aggregates.
2. Query the findings store using a filter aligned to the insight so the operator can inspect the records that drive the insight's aggregation.

What you'll need to have ready

• insightArn: The ARN of the saved insight to retrieve.
• productName: The product name value used to filter the underlying findings query.
• maxResults: The maximum number of findings to return for the insight drill-down.

For your developer

Arazzo workflow amazon-security-hub:review-insight-findings, 2 operations: GetInsights → GetFindings. Specs on APIs.io.