Skip to content

policyObjs

Returns status for all objects at a specified timestamp.

Arguments

Argument Type Description
day (required) String! Date in the format (YYYY-MM-DD).
timezone (required) String!
workloadTypes (required) [DataGovObjectType!]! Types of workloads that can be used for filtering query results.
sortBy String Name of the column to sort result by.
sortOrder SortOrder Sorts the order of results.
analysisStatusesFilter [AnalysisStatus!] List of analysis statuses used for filtering results.
policyIdsFilter [String!] List of policies used for filtering results.
riskLevelsFilter [RiskLevelType!] List of risk levels used for filtering results.
clusterIdsFilter [String!] List of Rubrik clusters for filtering results.
searchObjectName String Object name to search.
subscriptionIdsFilter [String!] List of subscriptions for filtering results.
includeWhitelistedResults Boolean Specifies whether whitelisted results should be included.
sids [String!] Filter for the given list of security identifiers.
insightsMetadataId String Filter objects with insights metadata ID.
includeInsightsMarker Boolean Specifies whether to include the insights marker.
userAccessObjectsFilter (required) Boolean! Filter objects with user access enabled.
objectIdsFilter [String!] Object IDs to filter.
platformFilter [Platform!] Platform to filter.
platformCategoryFilter [PlatformCategory!] Platform category to filter.
cloudAccountIdsFilter [String!] Cloud account IDs to filter.
resourceGroupsFilter [String!] Resource groups to filter.
regionsFilter [String!] Regions to filter.
dataTypeIdsFilter [String!] Data Type IDs to filter.
firstSeenTimeRange UserTimeRangeInput The first seen time range specified in the UTC timezone.
lastAccessTimeRange UserTimeRangeInput The last access time range specified in the UTC timezone.
creationTimeRange UserTimeRangeInput The creation time range specified in the UTC timezone.
lastScanTimeRange UserTimeRangeInput The last scan time range specified in the UTC timezone.
objectTagsFilter ObjectTagsFilterInput Object tags associated with workloads as key-value pairs.
mipLabelsFilter [MipLabelsFilterInput!] List of MIP Labels that will be used for filtering the result.
documentTypesFilter [UUID!] List of document type IDs that will be used for filtering the result.
scanResultErrorCodesFilter [FlowErrorCode!] List of scan result error codes that will be used for filtering the result.
scanResultCategoriesFilter [ScanResultCategory!] List of scan result categories that will be used for filtering the result.
backupStatusFilter [BackupStatus!] Filter by backup status.
slaIdsFilter [String!] Filter by SLA Domain IDs.
networkAccessFilter [NetworkAccess!] Filter by network access type.
encryptionFilter [Encryption!] Filter by encryption type.
loggingFilter [Logging!] Filter by logging type.
violationSeverityFilter [ViolationSeverity!] Violation Severity list input arg.
exposureFilter [OpenAccessType!] Exposure to filter.
accessTypeFilter [AccessVia!] Access types to filter by.
accessGrantingIdFilter String Filter policy objects by access granting identity ID. This filter should only be applied when an identity ID filter is also present, as access granting entities are only relevant in the context of specific identities.
first Int Returns the first n elements from the list.
after String Returns the elements in the list that occur after the specified cursor.
last Int Returns the last n elements from the list.
before String Returns the elements in the list that occur before the specified cursor.

Returns

PolicyObjConnection!

Sample

query PolicyObjs($day: String!, $timezone: String!, $workloadTypes: [DataGovObjectType!]!, $userAccessObjectsFilter: Boolean!) {
  policyObjs(
    day: $day
    timezone: $timezone
    workloadTypes: $workloadTypes
    userAccessObjectsFilter: $userAccessObjectsFilter
    first: 10
  ) {
    nodes {
      accessRiskReasons
      analysisStatus
      hasInsights
      id
      isUserAccessEnabledObject
      isUserActivityEnabled
      objectType
      osType
      riskLevel
      scanStatus
      shareType
      snapshotFid
      snapshotTimestamp
      timeContext
      violationSeverity
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{
  "day": "example-string",
  "timezone": "example-string",
  "workloadTypes": [
    "AWS_NATIVE_DYNAMODB_TABLE"
  ],
  "userAccessObjectsFilter": true
}

{
  "data": {
    "policyObjs": {
      "nodes": [
        [
          {
            "accessRiskReasons": [
              "HIGH_RISK_ANALYZER_HITS"
            ],
            "analysisStatus": "INITIAL_ANALYSIS",
            "hasInsights": true,
            "id": "example-string",
            "isUserAccessEnabledObject": true,
            "isUserActivityEnabled": true
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}