Custom Security Hub widget for custom AWS Config Conformance pack results?

Question

Hi all

I deployed a custom AWS Config conformance pack and I'd love to create a AWS Security Hub custom widget in the Summary page as follows:

1. Filter findings using: Title CONTAINS "conformance-pack"
2. Filter findings received in the last 24 hours
3. Filter findings using: Compliance status IS "FAILED"
4. Suppress some findings using : Title CONTAINS "xyz-xyz"
5. Show compliance ratio: % and bar graph

AWS Security Hub can support this?

Thanks.

User_nsu · Answer

Hello,

Have you tried creating an insight for this instead of a widget? I noticed that Security Hub widget customization is limited to I leverage an insight for mine.

Go To Security Hub, selects insights and click on create insights and adjust the following filters. 
1. Title - Contains = conformance-pack
2. Updated at = 1 day
3. Compliance Status = FAILED
4.  Title (to suppress) NOT_CONTAINS = xyz

Group by Type or Compliance Status

Custom Security Hub widget for custom AWS Config Conformance pack results?

Add your answer

Relevant content