This is the new AWS CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::SecurityHub::AutomationRuleV2 OcsfStringFilter
Enables filtering of security findings based on string field values in OCSF.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "FieldName" :String, "Filter" :StringFilter}
YAML
FieldName:StringFilter:StringFilter
Properties
FieldName-
The name of the field.
Required: Yes
Type: String
Allowed values:
metadata.uid | activity_name | cloud.account.name | cloud.account.uid | cloud.provider | cloud.region | compliance.assessments.category | compliance.assessments.name | compliance.control | compliance.status | compliance.standards | finding_info.desc | finding_info.src_url | finding_info.title | finding_info.types | finding_info.uid | finding_info.related_events.uid | finding_info.related_events.product.uid | finding_info.related_events.title | metadata.product.feature.uid | metadata.product.name | metadata.product.uid | metadata.product.vendor_name | remediation.desc | remediation.references | resources.cloud_partition | resources.name | resources.region | resources.type | resources.uid | severity | status | comment | vulnerabilities.fix_coverage | class_nameUpdate requires: No interruption
Filter-
Enables filtering of security findings based on string field values in OCSF.
Required: Yes
Type: StringFilter
Update requires: No interruption
