By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

how can i store security hub findings-imported key value in variable in input transformer

1

i was using input transformer to have specific key value but I got stuck while fetch one key value i.e Id in resources , if you can refer sample event there on below id key is there and I want to fetch value for that key value, if anyone can help me here please. i tried , "id": ""$.detail.findings[0].Resource.id" but this didn't worked.

Topics
Security, Identity, & ComplianceServerlessApplication Integration
Tags
AWS Security HubAmazon EventBridge
Language
English
rePost-User-9257957
asked 2 years ago258 views
1 Answer
0

The syntax of the findings array is outlined here: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-syntax.html. According to that syntax the key you're looking for (Resource) does not exist on the objects in the findings array. You might try $.detail.findings[0].Resources[0].Id and see if that has the information you're after.

profile pictureAWS
MiguelUT
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content