aws-securityhub-automation-rule-note-custom-fields

Automation-rule actions can write static note text and user-defined values into every matching finding.

awshigh service: aws:securityhub emits ContainsSecret

Where it sits

locationBatchGetAutomationRules.Rules[].Actions[].FindingFieldsUpdate.{Note,UserDefinedFields}
location kindconfig_field
data kindscredential password api_key sensitive_data
emits edgeContainsSecret
serviceSecurity Hub (aws:securityhub)

Collection recipe

access moderead_api
operationBatchGetAutomationRules
response pathRules[].Actions[].FindingFieldsUpdate.{Note,UserDefinedFields}
encodingjson
params{"AutomationRulesArns": ["\u003cautomation-rule-arn\u003e"]}

Required permissions

securityhub:BatchGetAutomationRules

References

move · open · esc close