get_violation_details
async
¶
get_violation_details(
policy_id: PolicyId,
member_account: AWSAccountId,
resource_id: ResourceId,
resource_type: ResourceType,
*,
config_overrides: Optional[AsyncFMSClientConfig] = None,
) -> GetViolationDetailsResponse
Retrieves violations for a resource based on the specified Firewall Manager policy and Amazon Web Services account.
Parameters:
-
policy_id(PolicyId) –The ID of the Firewall Manager policy that you want the details for. You can get violation details for the following policy types:
-
WAF
-
DNS Firewall
-
Imported Network Firewall
-
Network Firewall
-
Security group content audit
-
Network ACL
-
Third-party firewall
-
-
member_account(AWSAccountId) –The Amazon Web Services account ID that you want the details for.
-
resource_id(ResourceId) –The ID of the resource that has violations.
-
resource_type(ResourceType) –The resource type. This is in the format shown in the Amazon Web Services Resource Types Reference. Supported resource types are:
AWS::WAFv2::WebACL,AWS::EC2::Instance,AWS::EC2::NetworkInterface,AWS::EC2::SecurityGroup,AWS::NetworkFirewall::FirewallPolicy, andAWS::EC2::Subnet.
Raises:
-
InternalErrorException–The operation failed because of a system problem, even though the request was valid. Retry your request.
-
InvalidInputException–The parameters of the request were invalid.
-
ResourceNotFoundException–The specified resource was not found.
-
UnknownServiceError–The service returned an error code this client does not model.