How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Amazon IoT Device Defender Audit API

The Audit API from Amazon IoT Device Defender — 19 operation(s) for audit.

Amazon IoT Device Defender Audit API is one of 69 APIs that Amazon IoT Device Defender publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Audit. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a getting-started guide, and pricing.

This API exposes 25 operations across 19 paths, and defines 145 schemas. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against 4 base URLs: http://iot.{region}.amazonaws.com, https://iot.{region}.amazonaws.com, http://iot.{region}.amazonaws.com.cn, https://iot.{region}.amazonaws.com.cn.

25 operations 19 paths 145 schemas 2 DELETE10 GET3 PATCH8 POST2 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Base URL
https://iot.amazonaws.com
Authentication
API Key
Terms of Service
Resource Areas
1

Authentication & Security 1

Amazon IoT Device Defender Audit API declares 1 security scheme for authenticating requests. An API key is passed in the header as Authorization (hmac). By default, every request must be authenticated.

  • hmac — Amazon Signature authorization v4

Paths & Operations 25

Across 19 paths, the API surfaces 25 operations — 2 DELETE, 10 GET, 3 PATCH, 8 POST, 2 PUT. Each is listed below with its method, path, parameters, and response codes.

Audit 25
PUT
/audit/mitigationactions/tasks/{taskId}/cancel
Amazon IoT Device Defender Cancel Audit Mitigation Actions Task
CancelAuditMitigationActionsTask 8 params → 200480481482483
PUT
/audit/tasks/{taskId}/cancel
Amazon IoT Device Defender Cancel Audit Task
CancelAuditTask 8 params → 200480481482483
POST
/audit/suppressions/create
Amazon IoT Device Defender Create Audit Suppression
CreateAuditSuppression 7 params body → 200480481482483484
POST
/audit/scheduledaudits/{scheduledAuditName}
Amazon IoT Device Defender Create Scheduled Audit
CreateScheduledAudit 8 params body → 200480481482483484
DELETE
/audit/scheduledaudits/{scheduledAuditName}
Amazon IoT Device Defender Delete Scheduled Audit
DeleteScheduledAudit 8 params → 200480481482483
GET
/audit/scheduledaudits/{scheduledAuditName}
Amazon IoT Device Defender Describe Scheduled Audit
DescribeScheduledAudit 8 params → 200480481482483
PATCH
/audit/scheduledaudits/{scheduledAuditName}
Amazon IoT Device Defender Update Scheduled Audit
UpdateScheduledAudit 8 params body → 200480481482483
DELETE
/audit/configuration
Amazon IoT Device Defender Delete Account Audit Configuration
DeleteAccountAuditConfiguration 8 params → 200480481482483
GET
/audit/configuration
Amazon IoT Device Defender Describe Account Audit Configuration
DescribeAccountAuditConfiguration 7 params → 200480481
PATCH
/audit/configuration
Amazon IoT Device Defender Update Account Audit Configuration
UpdateAccountAuditConfiguration 7 params body → 200480481482
POST
/audit/suppressions/delete
Amazon IoT Device Defender Delete Audit Suppression
DeleteAuditSuppression 7 params body → 200480481482
GET
/audit/findings/{findingId}
Amazon IoT Device Defender Describe Audit Finding
DescribeAuditFinding 8 params → 200480481482483
GET
/audit/mitigationactions/tasks/{taskId}
Amazon IoT Device Defender Describe Audit Mitigation Actions Task
DescribeAuditMitigationActionsTask 8 params → 200480481482483
POST
/audit/mitigationactions/tasks/{taskId}
Amazon IoT Device Defender Start Audit Mitigation Actions Task
StartAuditMitigationActionsTask 8 params body → 200480481482483484
POST
/audit/suppressions/describe
Amazon IoT Device Defender Describe Audit Suppression
DescribeAuditSuppression 7 params body → 200480481482483
GET
/audit/tasks/{taskId}
Amazon IoT Device Defender Describe Audit Task
DescribeAuditTask 8 params → 200480481482483
POST
/audit/findings
Amazon IoT Device Defender List Audit Findings
ListAuditFindings 9 params body → 200480481482
GET
/audit/mitigationactions/executions#taskId&findingId
Amazon IoT Device Defender List Audit Mitigation Actions Executions
ListAuditMitigationActionsExecutions 12 params → 200480481482
GET
/audit/mitigationactions/tasks#startTime&endTime
Amazon IoT Device Defender List Audit Mitigation Actions Tasks
ListAuditMitigationActionsTasks 14 params → 200480481482
POST
/audit/suppressions/list
Amazon IoT Device Defender List Audit Suppressions
ListAuditSuppressions 9 params body → 200480481482
GET
/audit/tasks#startTime&endTime
Amazon IoT Device Defender List Audit Tasks
ListAuditTasks 13 params → 200480481482
GET
/audit/relatedResources#findingId
Amazon IoT Device Defender List Related Resources for Audit Finding
ListRelatedResourcesForAuditFinding 10 params → 200480481482483
GET
/audit/scheduledaudits
Amazon IoT Device Defender List Scheduled Audits
ListScheduledAudits 9 params → 200480481482
POST
/audit/tasks
Amazon IoT Device Defender Start on Demand Audit Task
StartOnDemandAuditTask 7 params body → 200480481482483
PATCH
/audit/suppressions/update
Amazon IoT Device Defender Update Audit Suppression
UpdateAuditSuppression 7 params body → 200480481482483

Schemas 145

The contract defines 145 schemas that model the data the API accepts and returns. The most detailed are AuditFinding (11 properties), ResourceIdentifier (10 properties), AuditMitigationActionExecutionMetadata (9 properties), AuditCheckDetails (7 properties). Each schema is shown below with its type and property counts.

String
string
FindingIds
array
AuditFinding
object
The findings (results) of the audit.
11 properties
AuditCheckConfigurations
object
CreateAuditSuppressionResponse
object
AuditMitigationActionsTaskStatus
string
AuditCheckConfiguration
object
Which audit checks are enabled and disabled for this account.
1 property
TaskAlreadyExistsException
AuditFindingSeverity
string
ScheduledAuditMetadata
object
Information about the scheduled audit.
5 properties
ReasonForNonCompliance
string
TargetAuditCheckNames
array
PublishFindingToSnsParams
object
Parameters to define a mitigation action that publishes findings to Amazon SNS. You can implement your own custom actions in response to the Amazon SNS message…
1 property 1 required
ListAuditFindingsResponse
object
2 properties
AuditNotificationTarget
object
Information about the targets to which audit notifications are sent.
3 properties
SkippedFindingsCount
integer
InvalidRequestException
TotalFindingsCount
integer
UpdateDeviceCertificateParams
object
Parameters to define a mitigation action that changes the state of the device certificate to inactive.
1 property 1 required
ScheduledAuditName
string
InternalFailureException
DeleteScheduledAuditResponse
object
CancelAuditTaskResponse
object
MitigationActionList
array
ScheduledAuditMetadataList
array
TotalChecksCount
integer
PolicyTemplateName
string
PolicyName
string
ResourceAlreadyExistsException
AuditMitigationActionsTaskMetadataList
array
NonCompliantChecksCount
integer
NonCompliantResource
object
Information about the resource that was noncompliant with the audit check.
3 properties
AuditTaskMetadataList
array
AuditSuppressionList
array
PolicyVersionId
string
AuditDetails
object
ReplaceDefaultPolicyVersionParams
object
Parameters to define a mitigation action that adds a blank policy to restrict permissions.
1 property 1 required
DescribeAuditTaskResponse
object
6 properties
CognitoIdentityPoolId
string
Timestamp
string
IssuerCertificateSerialNumber
string
ListAuditTasksResponse
object
2 properties
IssuerId
string
ClientId
string
TagValue
string
DescribeAuditFindingResponse
object
1 property
ErrorCode
string
IssuerCertificateSubject
string
UpdateScheduledAuditResponse
object
1 property
AuditCheckToActionsMapping
object
LogLevel
string
NullableBoolean
boolean
CertificateId
string
RelatedResources
array
AuditTaskType
string
ThingGroupNames
array
ThrottlingException
LimitExceededException
UpdateCACertificateParams
object
Parameters to define a mitigation action that changes the state of the CA certificate to inactive.
1 property 1 required
AuditFrequency
string
NonCompliantResourcesCount
integer
ResourceType
string
TargetArn
string
CanceledChecksCount
integer
MitigationActionsTaskId
string
FailedFindingsCount
integer
CertificateArn
string
AuditNotificationTargetConfigurations
object
ListScheduledAuditsResponse
object
2 properties
StringMap
object
DescribeAccountAuditConfigurationResponse
object
3 properties
MitigationAction
object
Describes which changes should be applied as part of a mitigation action.
4 properties
AddThingsToThingGroupParams
object
Parameters used when defining a mitigation action that move a set of things to a thing group.
2 properties 1 required
AuditTaskMetadata
object
The audits that were performed.
3 properties
AuditTaskStatus
string
InProgressChecksCount
integer
ListAuditMitigationActionsTasksResponse
object
2 properties
AuditMitigationActionsTaskMetadata
object
Information about an audit mitigation actions task that is returned by ListAuditMitigationActionsTasks .
3 properties
AuditMitigationActionsTaskStatistics
object
AuditMitigationActionExecutionMetadata
object
Returned by ListAuditMitigationActionsTask, this object contains information that describes a mitigation action that has been started.
9 properties
DayOfWeek
string
MitigationActionName
string
PolicyVersionIdentifier
object
Information about the version of the policy associated with the resource.
2 properties
CACertificateUpdateAction
string
MitigationActionNameList
array
NextToken
string
ErrorMessage
string
AwsAccountId
string
SucceededFindingsCount
integer
RoleAliasArn
string
AuditTaskId
string
AuditSuppression
object
Filters out specific findings of a Device Defender audit.
5 properties 2 required
AuditCheckDetails
object
Information about the audit check.
7 properties
SnsTopicArn
string
ListAuditSuppressionsResponse
object
2 properties
EnableIoTLoggingParams
object
Parameters used when defining a mitigation action that enable Amazon Web Services IoT Core logging.
2 properties 2 required
IssuerCertificateIdentifier
object
The certificate issuer indentifier.
3 properties
AuditMitigationActionExecutionMetadataList
array
StartOnDemandAuditTaskResponse
object
1 property
AuditCheckName
string
An audit check name. Checks must be enabled for your account. (Use DescribeAccountAuditConfiguration to see the list of all checks, including those that are en…
MitigationActionParams
object
The set of parameters for this mitigation action. You can specify only one type of parameter (in other words, you can apply only one action for each defined mi…
6 properties
WaitingForDataCollectionChecksCount
integer
DescribeAuditMitigationActionsTaskResponse
object
7 properties
TotalResourcesCount
integer
FailedChecksCount
integer
DescribeScheduledAuditResponse
object
6 properties
UpdateAccountAuditConfigurationResponse
object
TagKey
string
FindingId
string
SuppressIndefinitely
boolean
TaskStatisticsForAuditCheck
object
Provides summary counts of how many tasks for findings are in a particular state. This information is included in the response from DescribeAuditMitigationActi…
5 properties
RelatedResource
object
Information about a related resource.
3 properties
ThingGroupName
string
ResourceIdentifier
object
Information that identifies the noncompliant resource.
10 properties
MitigationActionId
string
SuppressedNonCompliantResourcesCount
integer
CreateScheduledAuditResponse
object
1 property
AuditMitigationActionsTaskTarget
object
Used in MitigationActionParams, this information identifies the target findings to which the mitigation actions are applied. Only one entry appears.
3 properties
DayOfMonth
string
Enabled
boolean
ReasonForNonComplianceCode
string
DeleteAccountAuditConfigurationResponse
object
TaskStatistics
object
Statistics for the checks performed during the audit.
7 properties
DeleteAuditSuppressionResponse
object
CancelAuditMitigationActionsTaskResponse
object
AuditFindings
array
CanceledFindingsCount
integer
AuditCheckRunStatus
string
ReasonForNonComplianceCodes
array
AuditDescription
string
AuditCheckToReasonCodeFilter
object
CheckCompliant
boolean
RoleArn
string
ScheduledAuditArn
string
UpdateAuditSuppressionResponse
object
ResourceNotFoundException
StartAuditMitigationActionsTaskResponse
object
1 property
DescribeAuditSuppressionResponse
object
5 properties
AuditMitigationActionsExecutionStatus
string
Tag
object
A set of key/value pairs that are used to manage the resource.
2 properties 1 required
ListRelatedResourcesForAuditFindingResponse
object
2 properties
DeviceCertificateUpdateAction
string
ListAuditMitigationActionsExecutionsResponse
object
2 properties
IsSuppressed
boolean
CompliantChecksCount
integer

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

amazon-iot-device-defender-audit-api-openapi.yml Raw ↑

Other APIs Amazon IoT Device Defender publishes across the network.

Amazon IoT Device Defender Accept Certificate Transfer API
Amazon IoT Device Defender Active Violations API
Amazon IoT Device Defender Attached Policies API
Amazon IoT Device Defender Authorizer API
Amazon IoT Device Defender Authorizers API
Amazon IoT Device Defender Behavior Model Training API
Amazon IoT Device Defender Billing Groups API
Amazon IoT Device Defender Cacertificate API
Amazon IoT Device Defender Cacertificates API
Amazon IoT Device Defender Cancel Certificate Transfer API
Amazon IoT Device Defender Certificate API
Amazon IoT Device Defender Certificates API
Where this information came from

This is an independent, third-party profile of Amazon IoT Device Defender Audit API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.