Amazon AWS Security Hub
AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your environment against security industry standards and best practices.
Security Hub collects security data from across AWS accounts, services, and supported third-party partner products and helps you analyze your security trends and identify the highest priority security issues.
Capabilities
This connector provides the following capabilities:
- Get Findings
- Get Insights
Configurations
AWS Security Hub
Authenticates using AWS credentials
Configuration Parameters
Parameter | Description | Type | Required |
|---|---|---|---|
aws_access_key_id | A specific AWS access key ID | string | Required |
aws_secret_access_key | A specific AWS secret access key | string | Required |
region_name | The AWS Region where you want to create new connections | string | Required |
role_arn | ARN Role | string | Required |
Actions
Get Findings
Get Findings
Endpoint
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
Filters | object | Optional | Parameter for Get Findings |
Filters.AwsAccountId | array | Optional | Unique identifier |
Filters.AwsAccountId.Comparison | string | Optional | Unique identifier |
Filters.AwsAccountId.Value | string | Optional | Unique identifier |
Filters.CompanyName | array | Optional | Name of the resource |
Filters.CompanyName.Comparison | string | Optional | Name of the resource |
Filters.CompanyName.Value | string | Optional | Name of the resource |
Filters.ComplianceAssociatedStandardsId | array | Optional | Unique identifier |
Filters.ComplianceAssociatedStandardsId.Comparison | string | Optional | Unique identifier |
Filters.ComplianceAssociatedStandardsId.Value | string | Optional | Unique identifier |
Filters.ComplianceSecurityControlId | array | Optional | Unique identifier |
Filters.ComplianceSecurityControlId.Comparison | string | Optional | Unique identifier |
Filters.ComplianceSecurityControlId.Value | string | Optional | Unique identifier |
Filters.ComplianceStatus | array | Optional | Status value |
Filters.ComplianceStatus.Comparison | string | Optional | Status value |
Filters.ComplianceStatus.Value | string | Optional | Status value |
Filters.Confidence | array | Optional | Unique identifier |
Filters.Confidence.Eq | number | Optional | Unique identifier |
Filters.Confidence.Gte | number | Optional | Unique identifier |
Filters.Confidence.Lte | number | Optional | Unique identifier |
Filters.CreatedAt | array | Optional | Parameter for Get Findings |
Filters.CreatedAt.DateRange | object | Optional | Parameter for Get Findings |
Filters.CreatedAt.DateRange.Unit | string | Optional | Parameter for Get Findings |
Filters.CreatedAt.DateRange.Value | number | Optional | Value for the parameter |
Filters.CreatedAt.End | string | Optional | Parameter for Get Findings |
Input Example
{"Filters":{"AwsAccountId":[{"Comparison":"string","Value":"string"}],"CompanyName":[{"Comparison":"string","Value":"string"}],"ComplianceAssociatedStandardsId":[{"Comparison":"string","Value":"string"}],"ComplianceSecurityControlId":[{"Comparison":"string","Value":"string"}],"ComplianceStatus":[{"Comparison":"string","Value":"string"}],"Confidence":[{"Eq":123,"Gte":123,"Lte":123}],"CreatedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"Criticality":[{"Eq":123,"Gte":123,"Lte":123}],"Description":[{"Comparison":"string","Value":"string"}],"FindingProviderFieldsConfidence":[{"Eq":123,"Gte":123,"Lte":123}],"FindingProviderFieldsCriticality":[{"Eq":123,"Gte":123,"Lte":123}],"FindingProviderFieldsRelatedFindingsId":[{"Comparison":"string","Value":"string"}],"FindingProviderFieldsRelatedFindingsProductArn":[{"Comparison":"string","Value":"string"}],"FindingProviderFieldsSeverityLabel":[{"Comparison":"string","Value":"string"}],"FindingProviderFieldsSeverityOriginal":[{"Comparison":"string","Value":"string"}],"FindingProviderFieldsTypes":[{"Comparison":"string","Value":"string"}],"FirstObservedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"GeneratorId":[{"Comparison":"string","Value":"string"}],"Id":[{"Comparison":"string","Value":"string"}],"Keyword":[{"Value":"string"}],"LastObservedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"MalwareName":[{"Comparison":"string","Value":"string"}],"MalwarePath":[{"Comparison":"string","Value":"string"}],"MalwareState":[{"Comparison":"string","Value":"string"}],"MalwareType":[{"Comparison":"string","Value":"string"}],"NetworkDestinationDomain":[{"Comparison":"string","Value":"string"}],"NetworkDestinationIpV4":[{"Cidr":"string"}],"NetworkDestinationIpV6":[{"Cidr":"string"}],"NetworkDestinationPort":[{"Eq":123,"Gte":123,"Lte":123}],"NetworkDirection":[{"Comparison":"string","Value":"string"}],"NetworkProtocol":[{"Comparison":"string","Value":"string"}],"NetworkSourceDomain":[{"Comparison":"string","Value":"string"}],"NetworkSourceIpV4":[{"Cidr":"string"}],"NetworkSourceIpV6":[{"Cidr":"string"}],"NetworkSourceMac":[{"Comparison":"string","Value":"string"}],"NetworkSourcePort":[{"Eq":123,"Gte":123,"Lte":123}],"NoteText":[{"Comparison":"string","Value":"string"}],"NoteUpdatedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"NoteUpdatedBy":[{"Comparison":"string","Value":"string"}],"ProcessLaunchedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"ProcessName":[{"Comparison":"string","Value":"string"}],"ProcessParentPid":[{"Eq":123,"Gte":123,"Lte":123}],"ProcessPath":[{"Comparison":"string","Value":"string"}],"ProcessPid":[{"Eq":123,"Gte":123,"Lte":123}],"ProcessTerminatedAt":[{"DateRange":{"Unit":"string","Value":123},"End":"string","Start":"string"}],"ProductArn":[{"Comparison":"string","Value":"string"}],"ProductFields":[{"Comparison":"string","Key":"string","Value":"string"}],"ProductName":[{"Comparison":"string","Value":"string"}],"RecommendationText":[{"Comparison":"string","Value":"string"}],"RecordState":[{"Comparison":"string","Value":"string"}]},"MaxResults":123,"NextToken":"string","SortCriteria":[{"Field":"string","SortOrder":"string"}]}
Get Insights
Lists and describes insights for the specified insight ARNs
Endpoint
- Method: GET
Input
Argument Name | Type | Required | Description |
|---|---|---|---|
InsightArns | array | Optional | Parameter for Get Insights |
PaginationConfig | object | Optional | Parameter for Get Insights |
PaginationConfig.MaxItems | number | Optional | Parameter for Get Insights |
PaginationConfig.PageSize | number | Optional | Parameter for Get Insights |
PaginationConfig.StartingToken | string | Optional | Parameter for Get Insights |
Input Example
{"InsightArns":["string"],"PaginationConfig":{"MaxItems":123,"PageSize":123,"StartingToken":"string"}}
Response Headers
Header | Description | Example |
|---|---|---|
Content-Type | The media type of the resource | application/json |
Date | The date and time at which the message was originated | Thu, 01 Jan 2024 00:00:00 GMT |