how can i store security hub findings-imported key value in variable in input transformer

1

i was using input transformer to have specific key value but I got stuck while fetch one key value i.e Id in resources , if you can refer sample event there on below id key is there and I want to fetch value for that key value, if anyone can help me here please. i tried , "id": ""$.detail.findings[0].Resource.id" but this didn't worked.

1 réponse
0

The syntax of the findings array is outlined here: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-syntax.html. According to that syntax the key you're looking for (Resource) does not exist on the objects in the findings array. You might try $.detail.findings[0].Resources[0].Id and see if that has the information you're after.

profile pictureAWS
répondu il y a 2 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions