secretInformationAccessAwsRoleFinding resource type

Article
11/17/2023

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

View AWS identities that have privileges to read, modify, or delete secret information.

Inherits from awsSecretInformationAccessFinding.

Methods

Method	Return type	Description
List secretInformationAccessAwsRoleFinding objects	secretInformationAccessAwsRoleFinding collection	Get a list of the secretInformationAccessAwsRoleFinding objects and their properties.
Get secretInformationAccessAwsRoleFinding	secretInformationAccessAwsRoleFinding	Read the properties and relationships of a secretInformationAccessAwsRoleFinding object.

Properties

Property	Type	Description
createdDateTime	DateTimeOffset	Defines when the finding was created. Inherited from finding.
id	String	Unique identifier for the finding. Inherited from entity.
lastActiveDateTime	DateTimeOffset	Defines the last time the identity in this finding executed an authorization system action. Inherited from awsSecretInformationAccessFinding.
permissionsCreepIndex	permissionsCreepIndex	A score for an identity's excessive permissions that is classified into three buckets: 0-33: low, 34-66: medium, 67-100: high. This property and its values are a snapshot as of when the finding was created and might not reflect the current score for the identity. Supports `$filter` (`gt`) and `$orderby`. Inherited from awsSecretInformationAccessFinding.
secretInformationWebServices	awsSecretInformationWebServices	*WS secret stores which can be accessed by the user, role, resource or serverless function Inherited from awsSecretInformationAccessFinding.The possible values are: `secretsManager`, `certificateAuthority`, `cloudHsm`, `certificateManager`, `unknownFutureValue`.

Relationships

Relationship	Type	Description
identity	authorizationSystemIdentity	Represents an identity in an authorization system onboarded to Permissions Management. Inherited from identityFinding. Autoexpanded by default.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.secretInformationAccessAwsRoleFinding",
  "id": "String (identifier)",
  "createdDateTime": "String (timestamp)",
  "secretInformationWebServices": "String",
  "permissionsCreepIndex": {
    "@odata.type": "microsoft.graph.permissionsCreepIndex"
  },
  "lastActiveDateTime": "String (timestamp)"
}

Share via