Skip to content

List Audit Findings

cloudwatchapplicationsignals_list_audit_findings R Documentation

Returns a list of audit findings that provide automated analysis of service behavior and root cause analysis

Description

Returns a list of audit findings that provide automated analysis of service behavior and root cause analysis. These findings help identify the most significant observations about your services, including performance issues, anomalies, and potential problems. The findings are generated using heuristic algorithms based on established troubleshooting patterns.

Usage

cloudwatchapplicationsignals_list_audit_findings(StartTime, EndTime,
  Auditors, AuditTargets, DetailLevel, NextToken, MaxResults)

Arguments

StartTime

[required] The start of the time period to retrieve audit findings for. When used in a raw HTTP Query API, it is formatted as epoch time in seconds. For example, 1698778057

EndTime

[required] The end of the time period to retrieve audit findings for. When used in a raw HTTP Query API, it is formatted as epoch time in seconds. For example, 1698778057

Auditors

A list of auditor names to filter the findings by. Only findings generated by the specified auditors will be returned.

The following auditors are available for configuration:

  • slo - SloAuditor: Identifies SLO violations and detects breached thresholds during the Assessment phase.

  • operation_metric - OperationMetricAuditor: Detects anomalies in service operation metrics from Application Signals RED metrics during the Assessment phase

    Anomaly detection is not supported for sparse metrics (those missing more than 80% of datapoints within the given time period).

  • service_quota - ServiceQuotaAuditor: Monitors resource utilization against service quotas during the Assessment phase

  • trace - TraceAuditor: Performs deep-dive analysis of distributed traces, correlating traces with breached SLOs or abnormal RED metrics during the Analysis phase

  • dependency_metric - CriticalPathAuditor: Analyzes service dependency impacts and maps dependency relationships from Application Signals RED metrics during the Analysis phase

  • top_contributor - TopContributorAuditor: Identifies infrastructure-level contributors to issues by analyzing EMF logs of Application Signals RED metrics during the Analysis phase

  • log - LogAuditor: Extracts insights from application logs, categorizing error types and ranking severity by frequency during the Analysis phase

  • change_indicator - ChangeIndicatorAuditor: Detects change events (deployments, configuration changes) that occurred within 10 minutes before and during a detected anomaly, and surfaces them as findings with deployment timestamps in the Analysis phase. When changes are detected, the top_contributor auditor skips its analysis to avoid redundancy.

InitAuditor and Summarizer auditors are not configurable as they are automatically triggered during the audit process.

AuditTargets

[required] A list of audit targets to filter the findings by. You can specify services, SLOs, or service operations to limit the audit findings to specific entities.

DetailLevel

The level of details of the audit findings. Supported values: BRIEF, DETAILED.

NextToken

Include this value, if it was returned by the previous operation, to get the next set of audit findings.

MaxResults

The maximum number of audit findings to return in one operation. If you omit this parameter, the default of 10 is used.

Value

A list with the following syntax:

list(
  StartTime = as.POSIXct(
    "2015-01-01"
  ),
  EndTime = as.POSIXct(
    "2015-01-01"
  ),
  AuditFindings = list(
    list(
      KeyAttributes = list(
        "string"
      ),
      AuditorResults = list(
        list(
          Auditor = "string",
          Description = "string",
          Data = list(
            "string"
          ),
          Severity = "CRITICAL"|"HIGH"|"MEDIUM"|"LOW"|"NONE"
        )
      ),
      Operation = "string",
      MetricGraph = list(
        MetricDataQueries = list(
          list(
            Id = "string",
            MetricStat = list(
              Metric = list(
                Namespace = "string",
                MetricName = "string",
                Dimensions = list(
                  list(
                    Name = "string",
                    Value = "string"
                  )
                )
              ),
              Period = 123,
              Stat = "string",
              Unit = "Microseconds"|"Milliseconds"|"Seconds"|"Bytes"|"Kilobytes"|"Megabytes"|"Gigabytes"|"Terabytes"|"Bits"|"Kilobits"|"Megabits"|"Gigabits"|"Terabits"|"Percent"|"Count"|"Bytes/Second"|"Kilobytes/Second"|"Megabytes/Second"|"Gigabytes/Second"|"Terabytes/Second"|"Bits/Second"|"Kilobits/Second"|"Megabits/Second"|"Gigabits/Second"|"Terabits/Second"|"Count/Second"|"None"
            ),
            Expression = "string",
            Label = "string",
            ReturnData = TRUE|FALSE,
            Period = 123,
            AccountId = "string"
          )
        ),
        StartTime = as.POSIXct(
          "2015-01-01"
        ),
        EndTime = as.POSIXct(
          "2015-01-01"
        )
      ),
      DependencyGraph = list(
        Nodes = list(
          list(
            KeyAttributes = list(
              "string"
            ),
            Name = "string",
            NodeId = "string",
            Operation = "string",
            Type = "string",
            Duration = 123.0,
            Status = "string"
          )
        ),
        Edges = list(
          list(
            SourceNodeId = "string",
            DestinationNodeId = "string",
            Duration = 123.0,
            ConnectionType = "INDIRECT"|"DIRECT"
          )
        )
      ),
      Type = "string"
    )
  ),
  NextToken = "string"
)

Request syntax

svc$list_audit_findings(
  StartTime = as.POSIXct(
    "2015-01-01"
  ),
  EndTime = as.POSIXct(
    "2015-01-01"
  ),
  Auditors = list(
    "string"
  ),
  AuditTargets = list(
    list(
      Type = "string",
      Data = list(
        Service = list(
          Type = "string",
          Name = "string",
          Environment = "string",
          AwsAccountId = "string"
        ),
        Slo = list(
          SloName = "string",
          SloArn = "string"
        ),
        ServiceOperation = list(
          Service = list(
            Type = "string",
            Name = "string",
            Environment = "string",
            AwsAccountId = "string"
          ),
          Operation = "string",
          MetricType = "string"
        ),
        Canary = list(
          CanaryName = "string"
        )
      )
    )
  ),
  DetailLevel = "BRIEF"|"DETAILED",
  NextToken = "string",
  MaxResults = 123
)