DRdruva
Threat Hunting

Search AWS Resources

Allows you to search AWS workloads- EC2 and EBS Volumes backed up to Druva Cloud for the selected/provided Phoenix (Enterprise Workloads) organization IDs, AWS account IDs, and regions. Currently, only AWS workloads - EC2 and EBS Volumes are supported.

post/common/v1/search/aws/resources

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/common/v1/search/aws/resources
  • Auth
    API key in header Authorization

Request body

orgIDsinteger[]

Specify the unique Phoenix(Enterprise Workload) organization ID.

accountIDsinteger[]

Specify the AWS Account IDs. You can obtain the ID using the 'Search AWS Accounts API'.

regionsstring[]

Specify the AWS region's code. For the list of supported regions, refer to the AWS Workloads documentation. For example, 'us-east-1' and 'us-west-2'.

deviceIDsinteger[]

Specify the AWS Device IDs. You can obtain the ID using the 'List AWS Resources API'.

pageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

Example request

{
  "orgIDs": [
    1
  ],
  "accountIDs": [
    1
  ],
  "regions": [
    "us-east-1"
  ],
  "deviceIDs": [
    1
  ],
  "tags": [
    {
      "Key": "Created by policy",
      "Value": "Threat-Hunt-Windows-Instance-Weekly"
    }
  ]
}

Response

Success

nextPageTokenstring

The token to access the next page of results. This parameter will be empty for the last page of results.

Example response

{
  "devices": [
    {
      "region": "us-east-1"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.