By using AWS re:Post, you agree to the Terms of Use

how can i store security hub findings-imported key value in variable in input transformer

1

i was using input transformer to have specific key value but I got stuck while fetch one key value i.e Id in resources , if you can refer sample event there on below id key is there and I want to fetch value for that key value, if anyone can help me here please. i tried , "id": ""$.detail.findings[0].Resource.id" but this didn't worked.

1 Answer
0

The syntax of the findings array is outlined here: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-syntax.html. According to that syntax the key you're looking for (Resource) does not exist on the objects in the findings array. You might try $.detail.findings[0].Resources[0].Id and see if that has the information you're after.

profile picture
answered 24 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions