DescribeFindings Powershell Example
Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"
# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.
$rest = New-Object Chilkat.Rest
$authAws = New-Object Chilkat.AuthAws
$authAws.AccessKey = "AWS_ACCESS_KEY"
$authAws.SecretKey = "AWS_SECRET_KEY"
# Don't forget to change the region to your particular region. (Also make the same change in the call to Connect below.)
$authAws.Region = "us-west-2"
$authAws.ServiceName = "inspector"
# SetAuthAws causes Chilkat to automatically add the following headers: Authorization, X-Amz-Date
$rest.SetAuthAws($authAws)
# URL: https://inspector.us-west-2.amazonaws.com/
# Use the same region as specified above.
$success = $rest.Connect("inspector.us-west-2.amazonaws.com",443,$true,$true)
if ($success -ne $true) {
$("ConnectFailReason: " + $rest.ConnectFailReason)
$($rest.LastErrorText)
exit
}
# The following code creates the JSON request body.
# The JSON created by this code is shown below.
# Use this online tool to generate code from sample JSON:
# Generate Code to Create JSON
$json = New-Object Chilkat.JsonObject
$json.UpdateString("findingArns[0]","string")
$json.UpdateString("locale","string")
# The JSON request body created by the above code:
# {
# "findingArns": [
# "string"
# ],
# "locale": "string"
# }
$rest.AddHeader("Content-Type","application/x-amz-json-1.1")
$rest.AddHeader("X-Amz-Target","InspectorService.DescribeFindings")
$sbRequestBody = New-Object Chilkat.StringBuilder
$json.EmitSb($sbRequestBody)
$sbResponseBody = New-Object Chilkat.StringBuilder
$success = $rest.FullRequestSb("POST","/",$sbRequestBody,$sbResponseBody)
if ($success -ne $true) {
$($rest.LastErrorText)
exit
}
$respStatusCode = $rest.ResponseStatusCode
$("response status code = " + $respStatusCode)
if ($respStatusCode -ne 200) {
$("Response Header:")
$($rest.ResponseHeader)
$("Response Body:")
$($sbResponseBody.GetAsString())
exit
}
$jResp = New-Object Chilkat.JsonObject
$jResp.LoadSb($sbResponseBody)
# The following code parses the JSON response.
# A sample JSON response is shown below the sample code.
# Use this online tool to generate parsing code from sample JSON:
# Generate Parsing Code from JSON
$FailureCode = $jResp.StringOf("failedItems.string.failureCode")
$Retryable = $jResp.IntOf("failedItems.string.retryable")
$i = 0
$count_i = $jResp.SizeOfArray("findings")
while ($i -lt $count_i) {
$jResp.I = $i
$arn = $jResp.StringOf("findings[i].arn")
$AgentId = $jResp.StringOf("findings[i].assetAttributes.agentId")
$AmiId = $jResp.StringOf("findings[i].assetAttributes.amiId")
$AutoScalingGroup = $jResp.StringOf("findings[i].assetAttributes.autoScalingGroup")
$Hostname = $jResp.StringOf("findings[i].assetAttributes.hostname")
$SchemaVersion = $jResp.IntOf("findings[i].assetAttributes.schemaVersion")
$assetType = $jResp.StringOf("findings[i].assetType")
$confidence = $jResp.IntOf("findings[i].confidence")
$createdAt = $jResp.IntOf("findings[i].createdAt")
$description = $jResp.StringOf("findings[i].description")
$id = $jResp.StringOf("findings[i].id")
$indicatorOfCompromise = $jResp.IntOf("findings[i].indicatorOfCompromise")
$numericSeverity = $jResp.IntOf("findings[i].numericSeverity")
$recommendation = $jResp.StringOf("findings[i].recommendation")
$schemaVersion = $jResp.IntOf("findings[i].schemaVersion")
$service = $jResp.StringOf("findings[i].service")
$AssessmentRunArn = $jResp.StringOf("findings[i].serviceAttributes.assessmentRunArn")
$RulesPackageArn = $jResp.StringOf("findings[i].serviceAttributes.rulesPackageArn")
$serviceAttributesSchemaVersion = $jResp.IntOf("findings[i].serviceAttributes.schemaVersion")
$severity = $jResp.StringOf("findings[i].severity")
$title = $jResp.StringOf("findings[i].title")
$updatedAt = $jResp.IntOf("findings[i].updatedAt")
$j = 0
$count_j = $jResp.SizeOfArray("findings[i].assetAttributes.ipv4Addresses")
while ($j -lt $count_j) {
$jResp.J = $j
$strVal = $jResp.StringOf("findings[i].assetAttributes.ipv4Addresses[j]")
$j = $j + 1
}
$j = 0
$count_j = $jResp.SizeOfArray("findings[i].assetAttributes.networkInterfaces")
while ($j -lt $count_j) {
$jResp.J = $j
$networkInterfaceId = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].networkInterfaceId")
$privateDnsName = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].privateDnsName")
$privateIpAddress = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].privateIpAddress")
$publicDnsName = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].publicDnsName")
$publicIp = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].publicIp")
$subnetId = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].subnetId")
$vpcId = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].vpcId")
$k = 0
$count_k = $jResp.SizeOfArray("findings[i].assetAttributes.networkInterfaces[j].ipv6Addresses")
while ($k -lt $count_k) {
$jResp.K = $k
$strVal = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].ipv6Addresses[k]")
$k = $k + 1
}
$k = 0
$count_k = $jResp.SizeOfArray("findings[i].assetAttributes.networkInterfaces[j].privateIpAddresses")
while ($k -lt $count_k) {
$jResp.K = $k
$privateDnsName = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].privateIpAddresses[k].privateDnsName")
$privateIpAddress = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].privateIpAddresses[k].privateIpAddress")
$k = $k + 1
}
$k = 0
$count_k = $jResp.SizeOfArray("findings[i].assetAttributes.networkInterfaces[j].securityGroups")
while ($k -lt $count_k) {
$jResp.K = $k
$groupId = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].securityGroups[k].groupId")
$groupName = $jResp.StringOf("findings[i].assetAttributes.networkInterfaces[j].securityGroups[k].groupName")
$k = $k + 1
}
$j = $j + 1
}
$j = 0
$count_j = $jResp.SizeOfArray("findings[i].assetAttributes.tags")
while ($j -lt $count_j) {
$jResp.J = $j
$key = $jResp.StringOf("findings[i].assetAttributes.tags[j].key")
$value = $jResp.StringOf("findings[i].assetAttributes.tags[j].value")
$j = $j + 1
}
$j = 0
$count_j = $jResp.SizeOfArray("findings[i].attributes")
while ($j -lt $count_j) {
$jResp.J = $j
$key = $jResp.StringOf("findings[i].attributes[j].key")
$value = $jResp.StringOf("findings[i].attributes[j].value")
$j = $j + 1
}
$j = 0
$count_j = $jResp.SizeOfArray("findings[i].userAttributes")
while ($j -lt $count_j) {
$jResp.J = $j
$key = $jResp.StringOf("findings[i].userAttributes[j].key")
$value = $jResp.StringOf("findings[i].userAttributes[j].value")
$j = $j + 1
}
$i = $i + 1
}
# A sample JSON response body parsed by the above code:
# {
# "failedItems": {
# "string": {
# "failureCode": "string",
# "retryable": boolean
# }
# },
# "findings": [
# {
# "arn": "string",
# "assetAttributes": {
# "agentId": "string",
# "amiId": "string",
# "autoScalingGroup": "string",
# "hostname": "string",
# "ipv4Addresses": [
# "string"
# ],
# "networkInterfaces": [
# {
# "ipv6Addresses": [
# "string"
# ],
# "networkInterfaceId": "string",
# "privateDnsName": "string",
# "privateIpAddress": "string",
# "privateIpAddresses": [
# {
# "privateDnsName": "string",
# "privateIpAddress": "string"
# }
# ],
# "publicDnsName": "string",
# "publicIp": "string",
# "securityGroups": [
# {
# "groupId": "string",
# "groupName": "string"
# }
# ],
# "subnetId": "string",
# "vpcId": "string"
# }
# ],
# "schemaVersion": number,
# "tags": [
# {
# "key": "string",
# "value": "string"
# }
# ]
# },
# "assetType": "string",
# "attributes": [
# {
# "key": "string",
# "value": "string"
# }
# ],
# "confidence": number,
# "createdAt": number,
# "description": "string",
# "id": "string",
# "indicatorOfCompromise": boolean,
# "numericSeverity": number,
# "recommendation": "string",
# "schemaVersion": number,
# "service": "string",
# "serviceAttributes": {
# "assessmentRunArn": "string",
# "rulesPackageArn": "string",
# "schemaVersion": number
# },
# "severity": "string",
# "title": "string",
# "updatedAt": number,
# "userAttributes": [
# {
# "key": "string",
# "value": "string"
# }
# ]
# }
# ]
# }
