Inspector list_findings return empty findingArns

boto3: 1.9.221

When executing:

inspector = boto3.client('inspector',os.environ['AWS_DEFAULT_REGION'])
inspector.list_findings(assessmentRunArns=["arn:aws:inspector:XXXXX"])

The resulting findingArns are empty ({‘findingArns’: []}), although there are 12 findings in that run. I initially thought it could be a permission issue or something, but I’ve ran that with another assessment run, which has 96 findings, and the return is of 12 findings (still wrong).

I’ve then executed the same search with aws inspector list-findings --assessment-run-arns arn:aws:inspector:XXXXX and the correct amount of findings were returned for both assessments.

One important piece of information is that one of this assessment run (12) is being executed toward a Windows Server 2016 with 2 rules exclusions (which aren’t supported) - CIS and Best practices.

Please let me know if you need further information.

[SkullyKiddo]

So I managed to find a workaround over it:

if inspector.can_paginate('list_findings') : 
        findingArns= {'findingArns': []}
        paginator = inspector.get_paginator('list_findings')
        page_interator = paginator.paginate(assessmentRunArns=[jsonVal['run']],maxResults=500)
        for page in page_interator:
            findingArns['findingArns'] = findingArns['findingArns'] + page['findingArns']
    else : findingArns = inspector.list_findings(assessmentRunArns=[jsonVal['run']],maxResults=500)

It seems like the pagination is the issue. Not sure if it’s a boto3 issue or an Inspector’s API. Anyhow, that’s still a bug, since the findings should predict that.

[manuchadha]

So I managed to find a workaround over it:

if inspector.can_paginate('list_findings') : 
        findingArns= {'findingArns': []}
        paginator = inspector.get_paginator('list_findings')
        page_interator = paginator.paginate(assessmentRunArns=[jsonVal['run']],maxResults=500)
        for page in page_interator:
            findingArns['findingArns'] = findingArns['findingArns'] + page['findingArns']
    else : findingArns = inspector.list_findings(assessmentRunArns=[jsonVal['run']],maxResults=500)

It seems like the pagination is the issue. Not sure if it’s a boto3 issue or an Inspector’s API. Anyhow, that’s still a bug, since the findings should predict that.

Working .Thanks