how can i store security hub findings-imported key value in variable in input transformer

Question

i was using input transformer to have specific key value but I got stuck while fetch one key value i.e Id in resources , if you can refer sample event there on below id key is there and I want to fetch value for that key value, if anyone can help me here please.
i tried ,
"id": ""$.detail.findings[0].Resource.id"
but this didn't worked.

Answer

The syntax of the findings array is outlined here: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-syntax.html.  According to that syntax the key you're looking for (`Resource`) does not exist on the objects in the `findings` array.  You might try `$.detail.findings[0].Resources[0].Id` and see if that has the information you're after.

how can i store security hub findings-imported key value in variable in input transformer

Contenuto pertinente