aws-securityhub-finding-import-payload
Custom finding producers can persist arbitrary sensitive text and maps in ASFF fields.
Where it sits
| location | BatchImportFindings request.Findings[] |
|---|
| location kind | payload |
|---|
| data kinds | credential password api_key access_key pii sensitive_data customer_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | Security Hub (aws:securityhub) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | BatchImportFindings |
|---|
| response path | request.Findings[] |
|---|
| encoding | json |
|---|
| params | {"Findings": ["\u003cASFF finding\u003e"]} |
|---|
Required permissions
securityhub:BatchImportFindings
References