aws_guardduty_list_findings
List AWS GuardDuty security findings by ID, with optional filtering by severity or type to identify potential threats in your cloud environment.
Instructions
List GuardDuty finding IDs, optionally filtered by severity or type. Use aws_guardduty_get_findings to retrieve full details.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"detector_id": "<detector_id>"
},
"name": "aws_guardduty_list_findings"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | AWS profile name from ~/.aws/config (e.g., 'default', 'production') | |
| region | No | AWS region override (e.g., 'us-east-1', 'sa-east-1') | |
| detector_id | Yes | Detector ID | |
| finding_criteria | No | Filter criteria. Example: {"Criterion": {"severity": {"Gte": 7}}} for high-severity findings, or {"Criterion": {"service.archived": {"Eq": ["false"]}}} | |
| max_results | No | Maximum finding IDs to return (default: 50) |