This section describes how to view AWS Security Hub Findings, update AWS Systems Manager OpsItems, and view AWS related resources in AWS Systems Manager OpsItems in Jira Service Management.
To view AWS Security Hub Findings in Jira Service Management from AWS Systems Manager
-
Log in to your Jira Agent view as an end user.
-
In the Jira Service Management Jira Agent view, choose the Jira project associated to the AWS Security Hub Finding.
-
Choose Open Issues and select the AWS Security Hub Finding from AWS that you want to view.
To update AWS Security Hub Finding in Jira Service Management
-
Log in to your Jira Agent view as an end user.
-
In the Jira Service Management Jira Agent view, choose the Jira project associated to AWS Security Hub Finding.
-
Choose Open Issues and select the AWS Security Hub Finding from AWS that you want to update.
-
Choose Edit Issue.
-
Update the fields available, such as Severity, Priority, and Criticality.
-
Choose Update to save the details.
Note
Updates to Security Hub Finding fields from Jira Service Management displays in the AWS account view of Findings on the next sync between AWS and Jira Service Management. Only the fields Severity, Priority, and Criticality update in the AWS account from Jira Service Management.
To view AWS related resources in AWS Security Hub Findings through Jira Service Management
-
Log in to your Jira Agent view as an end user.
-
In the Jira Service Management Jira Agent view, choose the Jira project associated to AWS Security Hub Finding.
-
Choose Open Issues and select the AWS Security Hub Finding.
-
In the selected AWS resources section of the AWS Security Hub Finding, you see the related resource details. If the resources relate and the AWS Config integration is active in the Connector, you can drill down on the Config resource details and relationships. The section remains empty if AWS resources do not relate in AWS Security Hub.
AWS Security Hub findings follow the AWS Security Finding Format (ASFF). Here’s a mapping of fields from AWS Security Hub findings to JSM Incident records.
| JIRA issue field | Security Hub ASFF field |
|---|---|
|
Created |
CreatedAt |
|
Updated |
UpdatedAt |
| Summary | Title |
| Priority | Severity.Label |
| Status | Workflow.Status |
Note
Jira does not duplicate findings. If a Security Hub finding is sent to Jira with the same finding ID as one previously sent to Jira, Jira updates the ticket with the most recent information in the finding.
