aws-securityhub-automation-rule-note-custom-fields
Automation-rule actions can write static note text and user-defined values into every matching finding.
Where it sits
| location | BatchGetAutomationRules.Rules[].Actions[].FindingFieldsUpdate.{Note,UserDefinedFields} |
| location kind | config_field |
| data kinds | credential password api_key sensitive_data |
| emits edge | ContainsSecret |
| service | Security Hub (aws:securityhub) |
Collection recipe
| access mode | read_api |
| operation | BatchGetAutomationRules |
| response path | Rules[].Actions[].FindingFieldsUpdate.{Note,UserDefinedFields} |
| encoding | json |
| params | {"AutomationRulesArns": ["\u003cautomation-rule-arn\u003e"]} |
Required permissions
securityhub:BatchGetAutomationRules
References