Filtering Amazon Inspector findings - Amazon Inspector
Creating filters in the Amazon Inspector console

Filtering Amazon Inspector findings

A finding filter allows you to view only the findings that match the criteria you specify. Findings that do not match the filter criteria are excluded from your view. You can create finding filters using the Amazon Inspector console. To use these filters to automatically suppress existing and future findings, see Suppressing Amazon Inspector findings with suppression rules.

Creating filters in the Amazon Inspector console

In each findings view, you can use the filter functionality to locate findings with specific characteristics. Filters are removed when you move to a different tabbed view.

A filter is made up of a filter criteria, which consists of a filter attribute paired with a filter value. Findings that do not match your filter criteria are excluded from the findings list. For example, to see all findings that are associated with your administrator account, you can choose the AWS account ID attribute and pair it with the value of your twelve digit AWS account ID.

Some filter criteria apply to all findings, while others are available for specific resource types or finding types only.

To apply a filter to the findings view

  1. Open the Amazon Inspector console at https://console.aws.amazon.com/inspector/v2/home.

  2. In the navigation pane, choose Findings. The default view displays all findings with an Active status.

  3. To filter findings by criteria, select the Add filter bar to see a list of all applicable filter criteria for that view. Different filter criteria are available in different views.

  4. Choose a criterion that you want to filter by from the list.

  5. From the criterion input pane enter the desired filter values to define that criterion.

  6. Choose Apply to apply that filter criterion to your current results. You can continue to add other filter criterion by selecting the filter input bar again.

  7. (Optional) To view your suppressed or closed findings, choose Active in the filter bar, and then choose Suppressed or Closed. Choose Show all to see active, suppressed, and closed findings in the same view.