Viewing results

Viewing results with the UI

To view the information of a scan, you can use the Security and Compliance Center UI.

If you edit your scope after it is already part of an attachment, any following scan results are listed as a new entry in the detailed results for your attachment. This means that you might see two entries with the same name.

1. In the IBM Cloud console, go to the Resource list page and select your instance of Security and Compliance Center.
2. In your instance of Security and Compliance Center, go to the Dashboard.
3. In the Detailed results section, find the row for the specific Scope and Profile combination that you want to view results for and click View in the Results column.

A page opens with an Overview of your results. To further investigate, you can view the results by Control or by Resource. Check out the following table to see what information is available in each tab.

Understanding detailed results

	Description
Overview	On the overview tab, you are provided with a graphical representation of your compliance for your selected scan. Success rate: The rate at which your configurations pass the evaluation that is conducted. Total controls: The total number of controls that were evaluated during this scan. Drift: The difference in results for your selected evaluation timeframe.
Controls	On the Controls tab, you are provided with an overview of the controls that were evaluated. The controls and their compliance status are listed for the time that the scan was done. You can also view annotations from this screen. Click View history to see your audit history.
Resources	On the Resources tab, you are provided with the results for each specific resource that was evaluated. \n In the JSON tab, you can see the assessment definition. In the Parameters tab, you can see the parameters that are relevant to that resource. In the Noncompliant properties tab, you are able to view which properties are noncompliant to begin remediating any issues that are found. In the Controls tab, you are able to view which controls that the assessment is associated with. In the Additional details tab, you can view the additional information that a specific provider might send with the evaluation results. This information might include, additional information, relevant links, or evidence.

Viewing results with the API

To get a report summary, you can use the Security and Compliance Center API.

curl -X GET
  --location --header "Authorization: Bearer {iam_token}"
  --header "Accept: application/json"
"https://us-south.compliance.cloud.ibm.com/instances/{instance_id}/v3/reports/{report_id}/summary"

(securityAndComplianceCenterApi *SecurityAndComplianceCenterApiV3) GetReportSummary(getReportSummaryOptions *GetReportSummaryOptions) (result *ReportSummary, response *core.DetailedResponse, err error)

GetReportSummaryOptions getReportSummaryOptions = new GetReportSummaryOptions.Builder()
  .reportId(reportIdForReportLink)
  .build();

Response<ReportSummary> response = securityAndComplianceCenterApiService.getReportSummary(getReportSummaryOptions).execute();
ReportSummary reportSummary = response.getResult();

System.out.println(reportSummary);

const params = {
  reportId: reportIdForReportLink,
};

let res;
try {
  res = await securityAndComplianceCenterApiService.getReportSummary(params);
  console.log(JSON.stringify(res.result, null, 2));
} catch (err) {
  console.warn(err);
}

response = security_and_compliance_center_api_service.get_report_summary(
  report_id=report_id_for_report_link,
)
report_summary = response.get_result()

print(json.dumps(report_summary, indent=2))

A successful response returns the detailed report from your scan, along with other metadata. For more information about the required and optional request parameters, check out the API docs.

Viewing results with the CLI

To get a report summary, you can use the Security and Compliance Center CLI. For more information, see the CLI reference.

ibmcloud security-compliance report summary
--report-id=exampleString
--x-correlation-id=exampleString
--x-request-id=exampleString

Viewing results with Terraform

To get a report summary, you can use Terraform.

data "ibm_scc_report_summary" "scc_report_summary" {
	report_id = "report_id"
}

For more information, check out the Security and Compliance Center Terraform reference.

Downloading a report

If you need to keep your results for long periods of time, or provide information to key stakeholders, you can download a report.

1. In the IBM Cloud console, go to the Resource list page and select your instance of Security and Compliance Center.
2. In your instance of Security and Compliance Center, go to the Dashboard.
3. Find the row for the specific Scope and Profile combination that you want to view results for and click the Results link. A page with the details of the latest evaluation opens.
4. Click Download report.

A CSV with your evaluation results is downloaded to your local system.