We recommend new projects start with resources from the AWS provider.
aws-native.securityhub.Insight
Explore with Pulumi AI
We recommend new projects start with resources from the AWS provider.
The AWS::SecurityHub::Insight resource represents the AWS Security Hub Insight in your account. An AWS Security Hub insight is a collection of related findings.
Create Insight Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Insight(name: string, args: InsightArgs, opts?: CustomResourceOptions);@overload
def Insight(resource_name: str,
            args: InsightArgs,
            opts: Optional[ResourceOptions] = None)
@overload
def Insight(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            filters: Optional[InsightAwsSecurityFindingFiltersArgs] = None,
            group_by_attribute: Optional[str] = None,
            name: Optional[str] = None)func NewInsight(ctx *Context, name string, args InsightArgs, opts ...ResourceOption) (*Insight, error)public Insight(string name, InsightArgs args, CustomResourceOptions? opts = null)
public Insight(String name, InsightArgs args)
public Insight(String name, InsightArgs args, CustomResourceOptions options)
type: aws-native:securityhub:Insight
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args InsightArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args InsightArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args InsightArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args InsightArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args InsightArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Insight Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Insight resource accepts the following input properties:
- Filters
Pulumi.Aws Native. Security Hub. Inputs. Insight Aws Security Finding Filters 
- One or more attributes used to filter the findings included in the insight
- GroupBy stringAttribute 
- The grouping attribute for the insight's findings
- Name string
- The name of a Security Hub insight
- Filters
InsightAws Security Finding Filters Args 
- One or more attributes used to filter the findings included in the insight
- GroupBy stringAttribute 
- The grouping attribute for the insight's findings
- Name string
- The name of a Security Hub insight
- filters
InsightAws Security Finding Filters 
- One or more attributes used to filter the findings included in the insight
- groupBy StringAttribute 
- The grouping attribute for the insight's findings
- name String
- The name of a Security Hub insight
- filters
InsightAws Security Finding Filters 
- One or more attributes used to filter the findings included in the insight
- groupBy stringAttribute 
- The grouping attribute for the insight's findings
- name string
- The name of a Security Hub insight
- filters
InsightAws Security Finding Filters Args 
- One or more attributes used to filter the findings included in the insight
- group_by_ strattribute 
- The grouping attribute for the insight's findings
- name str
- The name of a Security Hub insight
- filters Property Map
- One or more attributes used to filter the findings included in the insight
- groupBy StringAttribute 
- The grouping attribute for the insight's findings
- name String
- The name of a Security Hub insight
Outputs
All input properties are implicitly available as output properties. Additionally, the Insight resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- InsightArn string
- The ARN of a Security Hub insight
- Id string
- The provider-assigned unique ID for this managed resource.
- InsightArn string
- The ARN of a Security Hub insight
- id String
- The provider-assigned unique ID for this managed resource.
- insightArn String
- The ARN of a Security Hub insight
- id string
- The provider-assigned unique ID for this managed resource.
- insightArn string
- The ARN of a Security Hub insight
- id str
- The provider-assigned unique ID for this managed resource.
- insight_arn str
- The ARN of a Security Hub insight
- id String
- The provider-assigned unique ID for this managed resource.
- insightArn String
- The ARN of a Security Hub insight
Supporting Types
InsightAwsSecurityFindingFilters, InsightAwsSecurityFindingFiltersArgs          
- AwsAccount List<Pulumi.Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The AWS account ID in which a finding is generated.
- AwsAccount List<Pulumi.Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the AWS account in which a finding is generated.
- CompanyName List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- ComplianceAssociated List<Pulumi.Standards Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The unique identifier of a standard in which a control is enabled.
- ComplianceSecurity List<Pulumi.Control Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The unique identifier of a control across standards.
- ComplianceSecurity List<Pulumi.Control Parameters Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of a security control parameter.
- ComplianceSecurity List<Pulumi.Control Parameters Value Aws Native. Security Hub. Inputs. Insight String Filter> 
- The current value of a security control parameter.
- ComplianceStatus List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- Confidence
List<Pulumi.Aws Native. Security Hub. Inputs. Insight Number Filter> 
- A finding's confidence.
- CreatedAt List<Pulumi.Aws Native. Security Hub. Inputs. Insight Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- Criticality
List<Pulumi.Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The level of importance assigned to the resources associated with the finding.
- Description
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- A finding's description.
- FindingProvider List<Pulumi.Fields Confidence Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The finding provider value for the finding confidence.
- FindingProvider List<Pulumi.Fields Criticality Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- 
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The finding identifier of a related finding that is identified by the finding provider.
- 
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- FindingProvider List<Pulumi.Fields Severity Label Aws Native. Security Hub. Inputs. Insight String Filter> 
- The finding provider value for the severity label.
- FindingProvider List<Pulumi.Fields Severity Original Aws Native. Security Hub. Inputs. Insight String Filter> 
- The finding provider's original value for the severity.
- FindingProvider List<Pulumi.Fields Types Aws Native. Security Hub. Inputs. Insight String Filter> 
- One or more finding types that the finding provider assigned to the finding.
- FirstObserved List<Pulumi.At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- GeneratorId List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- Id
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The security findings provider-specific identifier for a finding.
- Keyword
List<Pulumi.Aws Native. Security Hub. Inputs. Insight Keyword Filter> 
- A keyword for a finding.
- LastObserved List<Pulumi.At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- MalwareName List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the malware that was observed.
- MalwarePath List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The filesystem path of the malware that was observed.
- MalwareState List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The state of the malware that was observed.
- MalwareType List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The type of the malware that was observed.
- NetworkDestination List<Pulumi.Domain Aws Native. Security Hub. Inputs. Insight String Filter> 
- The destination domain of network-related information about a finding.
- NetworkDestination List<Pulumi.Ip V4 Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The destination IPv4 address of network-related information about a finding.
- NetworkDestination List<Pulumi.Ip V6 Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The destination IPv6 address of network-related information about a finding.
- NetworkDestination List<Pulumi.Port Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The destination port of network-related information about a finding.
- NetworkDirection List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- Indicates the direction of network traffic associated with a finding.
- NetworkProtocol List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The protocol of network-related information about a finding.
- NetworkSource List<Pulumi.Domain Aws Native. Security Hub. Inputs. Insight String Filter> 
- The source domain of network-related information about a finding.
- NetworkSource List<Pulumi.Ip V4 Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The source IPv4 address of network-related information about a finding.
- NetworkSource List<Pulumi.Ip V6 Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The source IPv6 address of network-related information about a finding.
- NetworkSource List<Pulumi.Mac Aws Native. Security Hub. Inputs. Insight String Filter> 
- The source media access control (MAC) address of network-related information about a finding.
- NetworkSource List<Pulumi.Port Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The source port of network-related information about a finding.
- NoteText List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The text of a note.
- NoteUpdated List<Pulumi.At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- The timestamp of when the note was updated.
- NoteUpdated List<Pulumi.By Aws Native. Security Hub. Inputs. Insight String Filter> 
- The principal that created a note.
- ProcessLaunched List<Pulumi.At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- A timestamp that identifies when the process was launched.
- ProcessName List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the process.
- ProcessParent List<Pulumi.Pid Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The parent process ID.
- ProcessPath List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The path to the process executable.
- ProcessPid List<Pulumi.Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The process ID.
- ProcessTerminated List<Pulumi.At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- A timestamp that identifies when the process was terminated.
- ProductArn List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- ProductFields List<Pulumi.Aws Native. Security Hub. Inputs. Insight Map Filter> 
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- ProductName List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the solution (product) that generates findings.
- RecommendationText List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The recommendation of what to do about the issue described in a finding.
- RecordState List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The updated record state for the finding.
- Region
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The Region from which the finding was generated.
- 
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The solution-generated identifier for a related finding.
- 
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The ARN of the solution that generated a related finding.
- ResourceApplication List<Pulumi.Arn Aws Native. Security Hub. Inputs. Insight String Filter> 
- The ARN of the application that is related to a finding.
- ResourceApplication List<Pulumi.Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the application that is related to a finding.
- ResourceAws List<Pulumi.Ec2Instance Iam Instance Profile Arn Aws Native. Security Hub. Inputs. Insight String Filter> 
- The IAM profile ARN of the instance.
- ResourceAws List<Pulumi.Ec2Instance Image Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The Amazon Machine Image (AMI) ID of the instance.
- ResourceAws List<Pulumi.Ec2Instance Ip V4Addresses Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The IPv4 addresses associated with the instance.
- ResourceAws List<Pulumi.Ec2Instance Ip V6Addresses Aws Native. Security Hub. Inputs. Insight Ip Filter> 
- The IPv6 addresses associated with the instance.
- ResourceAws List<Pulumi.Ec2Instance Key Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The key name associated with the instance.
- ResourceAws List<Pulumi.Ec2Instance Launched At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- The date and time the instance was launched.
- ResourceAws List<Pulumi.Ec2Instance Subnet Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The identifier of the subnet that the instance was launched in.
- ResourceAws List<Pulumi.Ec2Instance Type Aws Native. Security Hub. Inputs. Insight String Filter> 
- The instance type of the instance.
- ResourceAws List<Pulumi.Ec2Instance Vpc Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The identifier of the VPC that the instance was launched in.
- ResourceAws List<Pulumi.Iam Access Key Created At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- The creation date/time of the IAM access key related to a finding.
- ResourceAws List<Pulumi.Iam Access Key Principal Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the principal that is associated with an IAM access key.
- ResourceAws List<Pulumi.Iam Access Key Status Aws Native. Security Hub. Inputs. Insight String Filter> 
- The status of the IAM access key related to a finding.
- ResourceAws List<Pulumi.Iam Access Key User Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The user associated with the IAM access key related to a finding.
- ResourceAws List<Pulumi.Iam User User Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of an IAM user.
- ResourceAws List<Pulumi.S3Bucket Owner Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The canonical user ID of the owner of the S3 bucket.
- ResourceAws List<Pulumi.S3Bucket Owner Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The display name of the owner of the S3 bucket.
- ResourceContainer List<Pulumi.Image Id Aws Native. Security Hub. Inputs. Insight String Filter> 
- The identifier of the image related to a finding.
- ResourceContainer List<Pulumi.Image Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the image related to a finding.
- ResourceContainer List<Pulumi.Launched At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- A timestamp that identifies when the container was started.
- ResourceContainer List<Pulumi.Name Aws Native. Security Hub. Inputs. Insight String Filter> 
- The name of the container related to a finding.
- ResourceDetails List<Pulumi.Other Aws Native. Security Hub. Inputs. Insight Map Filter> 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- ResourceId List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The canonical identifier for the given resource type.
- ResourcePartition List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The canonical AWS partition name that the Region is assigned to.
- ResourceRegion List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The canonical AWS external Region name where this resource is located.
- 
List<Pulumi.Aws Native. Security Hub. Inputs. Insight Map Filter> 
- A list of AWS tags associated with a resource at the time the finding was processed.
- ResourceType List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- Specifies the type of the resource that details are provided for.
- Sample
List<Pulumi.Aws Native. Security Hub. Inputs. Insight Boolean Filter> 
- Indicates whether or not sample findings are included in the filter results.
- SeverityLabel List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The label of a finding's severity.
- SeverityNormalized List<Pulumi.Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The normalized severity of a finding.
- SeverityProduct List<Pulumi.Aws Native. Security Hub. Inputs. Insight Number Filter> 
- The native severity as defined by the security findings provider's solution that generated the finding.
- SourceUrl List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- A URL that links to a page about the current finding in the security findings provider's solution.
- ThreatIntel List<Pulumi.Indicator Category Aws Native. Security Hub. Inputs. Insight String Filter> 
- The category of a threat intelligence indicator.
- ThreatIntel List<Pulumi.Indicator Last Observed At Aws Native. Security Hub. Inputs. Insight Date Filter> 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- ThreatIntel List<Pulumi.Indicator Source Aws Native. Security Hub. Inputs. Insight String Filter> 
- The source of the threat intelligence.
- ThreatIntel List<Pulumi.Indicator Source Url Aws Native. Security Hub. Inputs. Insight String Filter> 
- The URL for more details from the source of the threat intelligence.
- ThreatIntel List<Pulumi.Indicator Type Aws Native. Security Hub. Inputs. Insight String Filter> 
- The type of a threat intelligence indicator.
- ThreatIntel List<Pulumi.Indicator Value Aws Native. Security Hub. Inputs. Insight String Filter> 
- The value of a threat intelligence indicator.
- Title
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- A finding's title.
- Type
List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- A finding type in the format of namespace/category/classifier that classifies a finding.
- UpdatedAt List<Pulumi.Aws Native. Security Hub. Inputs. Insight Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- UserDefined List<Pulumi.Fields Aws Native. Security Hub. Inputs. Insight Map Filter> 
- A list of name/value string pairs associated with the finding.
- VerificationState List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The veracity of a finding.
- VulnerabilitiesExploit List<Pulumi.Available Aws Native. Security Hub. Inputs. Insight String Filter> 
- Indicates whether a software vulnerability in your environment has a known exploit.
- VulnerabilitiesFix List<Pulumi.Available Aws Native. Security Hub. Inputs. Insight String Filter> 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- WorkflowState List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The workflow state of a finding.
- WorkflowStatus List<Pulumi.Aws Native. Security Hub. Inputs. Insight String Filter> 
- The status of the investigation into a finding.
- AwsAccount []InsightId String Filter 
- The AWS account ID in which a finding is generated.
- AwsAccount []InsightName String Filter 
- The name of the AWS account in which a finding is generated.
- CompanyName []InsightString Filter 
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- ComplianceAssociated []InsightStandards Id String Filter 
- The unique identifier of a standard in which a control is enabled.
- ComplianceSecurity []InsightControl Id String Filter 
- The unique identifier of a control across standards.
- ComplianceSecurity []InsightControl Parameters Name String Filter 
- The name of a security control parameter.
- ComplianceSecurity []InsightControl Parameters Value String Filter 
- The current value of a security control parameter.
- ComplianceStatus []InsightString Filter 
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- Confidence
[]InsightNumber Filter 
- A finding's confidence.
- CreatedAt []InsightDate Filter 
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- Criticality
[]InsightNumber Filter 
- The level of importance assigned to the resources associated with the finding.
- Description
[]InsightString Filter 
- A finding's description.
- FindingProvider []InsightFields Confidence Number Filter 
- The finding provider value for the finding confidence.
- FindingProvider []InsightFields Criticality Number Filter 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- 
[]InsightString Filter 
- The finding identifier of a related finding that is identified by the finding provider.
- 
[]InsightString Filter 
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- FindingProvider []InsightFields Severity Label String Filter 
- The finding provider value for the severity label.
- FindingProvider []InsightFields Severity Original String Filter 
- The finding provider's original value for the severity.
- FindingProvider []InsightFields Types String Filter 
- One or more finding types that the finding provider assigned to the finding.
- FirstObserved []InsightAt Date Filter 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- GeneratorId []InsightString Filter 
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- Id
[]InsightString Filter 
- The security findings provider-specific identifier for a finding.
- Keyword
[]InsightKeyword Filter 
- A keyword for a finding.
- LastObserved []InsightAt Date Filter 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- MalwareName []InsightString Filter 
- The name of the malware that was observed.
- MalwarePath []InsightString Filter 
- The filesystem path of the malware that was observed.
- MalwareState []InsightString Filter 
- The state of the malware that was observed.
- MalwareType []InsightString Filter 
- The type of the malware that was observed.
- NetworkDestination []InsightDomain String Filter 
- The destination domain of network-related information about a finding.
- NetworkDestination []InsightIp V4 Ip Filter 
- The destination IPv4 address of network-related information about a finding.
- NetworkDestination []InsightIp V6 Ip Filter 
- The destination IPv6 address of network-related information about a finding.
- NetworkDestination []InsightPort Number Filter 
- The destination port of network-related information about a finding.
- NetworkDirection []InsightString Filter 
- Indicates the direction of network traffic associated with a finding.
- NetworkProtocol []InsightString Filter 
- The protocol of network-related information about a finding.
- NetworkSource []InsightDomain String Filter 
- The source domain of network-related information about a finding.
- NetworkSource []InsightIp V4 Ip Filter 
- The source IPv4 address of network-related information about a finding.
- NetworkSource []InsightIp V6 Ip Filter 
- The source IPv6 address of network-related information about a finding.
- NetworkSource []InsightMac String Filter 
- The source media access control (MAC) address of network-related information about a finding.
- NetworkSource []InsightPort Number Filter 
- The source port of network-related information about a finding.
- NoteText []InsightString Filter 
- The text of a note.
- NoteUpdated []InsightAt Date Filter 
- The timestamp of when the note was updated.
- NoteUpdated []InsightBy String Filter 
- The principal that created a note.
- ProcessLaunched []InsightAt Date Filter 
- A timestamp that identifies when the process was launched.
- ProcessName []InsightString Filter 
- The name of the process.
- ProcessParent []InsightPid Number Filter 
- The parent process ID.
- ProcessPath []InsightString Filter 
- The path to the process executable.
- ProcessPid []InsightNumber Filter 
- The process ID.
- ProcessTerminated []InsightAt Date Filter 
- A timestamp that identifies when the process was terminated.
- ProductArn []InsightString Filter 
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- ProductFields []InsightMap Filter 
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- ProductName []InsightString Filter 
- The name of the solution (product) that generates findings.
- RecommendationText []InsightString Filter 
- The recommendation of what to do about the issue described in a finding.
- RecordState []InsightString Filter 
- The updated record state for the finding.
- Region
[]InsightString Filter 
- The Region from which the finding was generated.
- 
[]InsightString Filter 
- The solution-generated identifier for a related finding.
- 
[]InsightString Filter 
- The ARN of the solution that generated a related finding.
- ResourceApplication []InsightArn String Filter 
- The ARN of the application that is related to a finding.
- ResourceApplication []InsightName String Filter 
- The name of the application that is related to a finding.
- ResourceAws []InsightEc2Instance Iam Instance Profile Arn String Filter 
- The IAM profile ARN of the instance.
- ResourceAws []InsightEc2Instance Image Id String Filter 
- The Amazon Machine Image (AMI) ID of the instance.
- ResourceAws []InsightEc2Instance Ip V4Addresses Ip Filter 
- The IPv4 addresses associated with the instance.
- ResourceAws []InsightEc2Instance Ip V6Addresses Ip Filter 
- The IPv6 addresses associated with the instance.
- ResourceAws []InsightEc2Instance Key Name String Filter 
- The key name associated with the instance.
- ResourceAws []InsightEc2Instance Launched At Date Filter 
- The date and time the instance was launched.
- ResourceAws []InsightEc2Instance Subnet Id String Filter 
- The identifier of the subnet that the instance was launched in.
- ResourceAws []InsightEc2Instance Type String Filter 
- The instance type of the instance.
- ResourceAws []InsightEc2Instance Vpc Id String Filter 
- The identifier of the VPC that the instance was launched in.
- ResourceAws []InsightIam Access Key Created At Date Filter 
- The creation date/time of the IAM access key related to a finding.
- ResourceAws []InsightIam Access Key Principal Name String Filter 
- The name of the principal that is associated with an IAM access key.
- ResourceAws []InsightIam Access Key Status String Filter 
- The status of the IAM access key related to a finding.
- ResourceAws []InsightIam Access Key User Name String Filter 
- The user associated with the IAM access key related to a finding.
- ResourceAws []InsightIam User User Name String Filter 
- The name of an IAM user.
- ResourceAws []InsightS3Bucket Owner Id String Filter 
- The canonical user ID of the owner of the S3 bucket.
- ResourceAws []InsightS3Bucket Owner Name String Filter 
- The display name of the owner of the S3 bucket.
- ResourceContainer []InsightImage Id String Filter 
- The identifier of the image related to a finding.
- ResourceContainer []InsightImage Name String Filter 
- The name of the image related to a finding.
- ResourceContainer []InsightLaunched At Date Filter 
- A timestamp that identifies when the container was started.
- ResourceContainer []InsightName String Filter 
- The name of the container related to a finding.
- ResourceDetails []InsightOther Map Filter 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- ResourceId []InsightString Filter 
- The canonical identifier for the given resource type.
- ResourcePartition []InsightString Filter 
- The canonical AWS partition name that the Region is assigned to.
- ResourceRegion []InsightString Filter 
- The canonical AWS external Region name where this resource is located.
- 
[]InsightMap Filter 
- A list of AWS tags associated with a resource at the time the finding was processed.
- ResourceType []InsightString Filter 
- Specifies the type of the resource that details are provided for.
- Sample
[]InsightBoolean Filter 
- Indicates whether or not sample findings are included in the filter results.
- SeverityLabel []InsightString Filter 
- The label of a finding's severity.
- SeverityNormalized []InsightNumber Filter 
- The normalized severity of a finding.
- SeverityProduct []InsightNumber Filter 
- The native severity as defined by the security findings provider's solution that generated the finding.
- SourceUrl []InsightString Filter 
- A URL that links to a page about the current finding in the security findings provider's solution.
- ThreatIntel []InsightIndicator Category String Filter 
- The category of a threat intelligence indicator.
- ThreatIntel []InsightIndicator Last Observed At Date Filter 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- ThreatIntel []InsightIndicator Source String Filter 
- The source of the threat intelligence.
- ThreatIntel []InsightIndicator Source Url String Filter 
- The URL for more details from the source of the threat intelligence.
- ThreatIntel []InsightIndicator Type String Filter 
- The type of a threat intelligence indicator.
- ThreatIntel []InsightIndicator Value String Filter 
- The value of a threat intelligence indicator.
- Title
[]InsightString Filter 
- A finding's title.
- Type
[]InsightString Filter 
- A finding type in the format of namespace/category/classifier that classifies a finding.
- UpdatedAt []InsightDate Filter 
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- UserDefined []InsightFields Map Filter 
- A list of name/value string pairs associated with the finding.
- VerificationState []InsightString Filter 
- The veracity of a finding.
- VulnerabilitiesExploit []InsightAvailable String Filter 
- Indicates whether a software vulnerability in your environment has a known exploit.
- VulnerabilitiesFix []InsightAvailable String Filter 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- WorkflowState []InsightString Filter 
- The workflow state of a finding.
- WorkflowStatus []InsightString Filter 
- The status of the investigation into a finding.
- awsAccount List<InsightId String Filter> 
- The AWS account ID in which a finding is generated.
- awsAccount List<InsightName String Filter> 
- The name of the AWS account in which a finding is generated.
- companyName List<InsightString Filter> 
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- complianceAssociated List<InsightStandards Id String Filter> 
- The unique identifier of a standard in which a control is enabled.
- complianceSecurity List<InsightControl Id String Filter> 
- The unique identifier of a control across standards.
- complianceSecurity List<InsightControl Parameters Name String Filter> 
- The name of a security control parameter.
- complianceSecurity List<InsightControl Parameters Value String Filter> 
- The current value of a security control parameter.
- complianceStatus List<InsightString Filter> 
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- confidence
List<InsightNumber Filter> 
- A finding's confidence.
- createdAt List<InsightDate Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- criticality
List<InsightNumber Filter> 
- The level of importance assigned to the resources associated with the finding.
- description
List<InsightString Filter> 
- A finding's description.
- findingProvider List<InsightFields Confidence Number Filter> 
- The finding provider value for the finding confidence.
- findingProvider List<InsightFields Criticality Number Filter> 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- 
List<InsightString Filter> 
- The finding identifier of a related finding that is identified by the finding provider.
- 
List<InsightString Filter> 
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- findingProvider List<InsightFields Severity Label String Filter> 
- The finding provider value for the severity label.
- findingProvider List<InsightFields Severity Original String Filter> 
- The finding provider's original value for the severity.
- findingProvider List<InsightFields Types String Filter> 
- One or more finding types that the finding provider assigned to the finding.
- firstObserved List<InsightAt Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- generatorId List<InsightString Filter> 
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- id
List<InsightString Filter> 
- The security findings provider-specific identifier for a finding.
- keyword
List<InsightKeyword Filter> 
- A keyword for a finding.
- lastObserved List<InsightAt Date Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- malwareName List<InsightString Filter> 
- The name of the malware that was observed.
- malwarePath List<InsightString Filter> 
- The filesystem path of the malware that was observed.
- malwareState List<InsightString Filter> 
- The state of the malware that was observed.
- malwareType List<InsightString Filter> 
- The type of the malware that was observed.
- networkDestination List<InsightDomain String Filter> 
- The destination domain of network-related information about a finding.
- networkDestination List<InsightIp V4 Ip Filter> 
- The destination IPv4 address of network-related information about a finding.
- networkDestination List<InsightIp V6 Ip Filter> 
- The destination IPv6 address of network-related information about a finding.
- networkDestination List<InsightPort Number Filter> 
- The destination port of network-related information about a finding.
- networkDirection List<InsightString Filter> 
- Indicates the direction of network traffic associated with a finding.
- networkProtocol List<InsightString Filter> 
- The protocol of network-related information about a finding.
- networkSource List<InsightDomain String Filter> 
- The source domain of network-related information about a finding.
- networkSource List<InsightIp V4 Ip Filter> 
- The source IPv4 address of network-related information about a finding.
- networkSource List<InsightIp V6 Ip Filter> 
- The source IPv6 address of network-related information about a finding.
- networkSource List<InsightMac String Filter> 
- The source media access control (MAC) address of network-related information about a finding.
- networkSource List<InsightPort Number Filter> 
- The source port of network-related information about a finding.
- noteText List<InsightString Filter> 
- The text of a note.
- noteUpdated List<InsightAt Date Filter> 
- The timestamp of when the note was updated.
- noteUpdated List<InsightBy String Filter> 
- The principal that created a note.
- processLaunched List<InsightAt Date Filter> 
- A timestamp that identifies when the process was launched.
- processName List<InsightString Filter> 
- The name of the process.
- processParent List<InsightPid Number Filter> 
- The parent process ID.
- processPath List<InsightString Filter> 
- The path to the process executable.
- processPid List<InsightNumber Filter> 
- The process ID.
- processTerminated List<InsightAt Date Filter> 
- A timestamp that identifies when the process was terminated.
- productArn List<InsightString Filter> 
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- productFields List<InsightMap Filter> 
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- productName List<InsightString Filter> 
- The name of the solution (product) that generates findings.
- recommendationText List<InsightString Filter> 
- The recommendation of what to do about the issue described in a finding.
- recordState List<InsightString Filter> 
- The updated record state for the finding.
- region
List<InsightString Filter> 
- The Region from which the finding was generated.
- 
List<InsightString Filter> 
- The solution-generated identifier for a related finding.
- 
List<InsightString Filter> 
- The ARN of the solution that generated a related finding.
- resourceApplication List<InsightArn String Filter> 
- The ARN of the application that is related to a finding.
- resourceApplication List<InsightName String Filter> 
- The name of the application that is related to a finding.
- resourceAws List<InsightEc2Instance Iam Instance Profile Arn String Filter> 
- The IAM profile ARN of the instance.
- resourceAws List<InsightEc2Instance Image Id String Filter> 
- The Amazon Machine Image (AMI) ID of the instance.
- resourceAws List<InsightEc2Instance Ip V4Addresses Ip Filter> 
- The IPv4 addresses associated with the instance.
- resourceAws List<InsightEc2Instance Ip V6Addresses Ip Filter> 
- The IPv6 addresses associated with the instance.
- resourceAws List<InsightEc2Instance Key Name String Filter> 
- The key name associated with the instance.
- resourceAws List<InsightEc2Instance Launched At Date Filter> 
- The date and time the instance was launched.
- resourceAws List<InsightEc2Instance Subnet Id String Filter> 
- The identifier of the subnet that the instance was launched in.
- resourceAws List<InsightEc2Instance Type String Filter> 
- The instance type of the instance.
- resourceAws List<InsightEc2Instance Vpc Id String Filter> 
- The identifier of the VPC that the instance was launched in.
- resourceAws List<InsightIam Access Key Created At Date Filter> 
- The creation date/time of the IAM access key related to a finding.
- resourceAws List<InsightIam Access Key Principal Name String Filter> 
- The name of the principal that is associated with an IAM access key.
- resourceAws List<InsightIam Access Key Status String Filter> 
- The status of the IAM access key related to a finding.
- resourceAws List<InsightIam Access Key User Name String Filter> 
- The user associated with the IAM access key related to a finding.
- resourceAws List<InsightIam User User Name String Filter> 
- The name of an IAM user.
- resourceAws List<InsightS3Bucket Owner Id String Filter> 
- The canonical user ID of the owner of the S3 bucket.
- resourceAws List<InsightS3Bucket Owner Name String Filter> 
- The display name of the owner of the S3 bucket.
- resourceContainer List<InsightImage Id String Filter> 
- The identifier of the image related to a finding.
- resourceContainer List<InsightImage Name String Filter> 
- The name of the image related to a finding.
- resourceContainer List<InsightLaunched At Date Filter> 
- A timestamp that identifies when the container was started.
- resourceContainer List<InsightName String Filter> 
- The name of the container related to a finding.
- resourceDetails List<InsightOther Map Filter> 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- resourceId List<InsightString Filter> 
- The canonical identifier for the given resource type.
- resourcePartition List<InsightString Filter> 
- The canonical AWS partition name that the Region is assigned to.
- resourceRegion List<InsightString Filter> 
- The canonical AWS external Region name where this resource is located.
- 
List<InsightMap Filter> 
- A list of AWS tags associated with a resource at the time the finding was processed.
- resourceType List<InsightString Filter> 
- Specifies the type of the resource that details are provided for.
- sample
List<InsightBoolean Filter> 
- Indicates whether or not sample findings are included in the filter results.
- severityLabel List<InsightString Filter> 
- The label of a finding's severity.
- severityNormalized List<InsightNumber Filter> 
- The normalized severity of a finding.
- severityProduct List<InsightNumber Filter> 
- The native severity as defined by the security findings provider's solution that generated the finding.
- sourceUrl List<InsightString Filter> 
- A URL that links to a page about the current finding in the security findings provider's solution.
- threatIntel List<InsightIndicator Category String Filter> 
- The category of a threat intelligence indicator.
- threatIntel List<InsightIndicator Last Observed At Date Filter> 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- threatIntel List<InsightIndicator Source String Filter> 
- The source of the threat intelligence.
- threatIntel List<InsightIndicator Source Url String Filter> 
- The URL for more details from the source of the threat intelligence.
- threatIntel List<InsightIndicator Type String Filter> 
- The type of a threat intelligence indicator.
- threatIntel List<InsightIndicator Value String Filter> 
- The value of a threat intelligence indicator.
- title
List<InsightString Filter> 
- A finding's title.
- type
List<InsightString Filter> 
- A finding type in the format of namespace/category/classifier that classifies a finding.
- updatedAt List<InsightDate Filter> 
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- userDefined List<InsightFields Map Filter> 
- A list of name/value string pairs associated with the finding.
- verificationState List<InsightString Filter> 
- The veracity of a finding.
- vulnerabilitiesExploit List<InsightAvailable String Filter> 
- Indicates whether a software vulnerability in your environment has a known exploit.
- vulnerabilitiesFix List<InsightAvailable String Filter> 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- workflowState List<InsightString Filter> 
- The workflow state of a finding.
- workflowStatus List<InsightString Filter> 
- The status of the investigation into a finding.
- awsAccount InsightId String Filter[] 
- The AWS account ID in which a finding is generated.
- awsAccount InsightName String Filter[] 
- The name of the AWS account in which a finding is generated.
- companyName InsightString Filter[] 
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- complianceAssociated InsightStandards Id String Filter[] 
- The unique identifier of a standard in which a control is enabled.
- complianceSecurity InsightControl Id String Filter[] 
- The unique identifier of a control across standards.
- complianceSecurity InsightControl Parameters Name String Filter[] 
- The name of a security control parameter.
- complianceSecurity InsightControl Parameters Value String Filter[] 
- The current value of a security control parameter.
- complianceStatus InsightString Filter[] 
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- confidence
InsightNumber Filter[] 
- A finding's confidence.
- createdAt InsightDate Filter[] 
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- criticality
InsightNumber Filter[] 
- The level of importance assigned to the resources associated with the finding.
- description
InsightString Filter[] 
- A finding's description.
- findingProvider InsightFields Confidence Number Filter[] 
- The finding provider value for the finding confidence.
- findingProvider InsightFields Criticality Number Filter[] 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- 
InsightString Filter[] 
- The finding identifier of a related finding that is identified by the finding provider.
- 
InsightString Filter[] 
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- findingProvider InsightFields Severity Label String Filter[] 
- The finding provider value for the severity label.
- findingProvider InsightFields Severity Original String Filter[] 
- The finding provider's original value for the severity.
- findingProvider InsightFields Types String Filter[] 
- One or more finding types that the finding provider assigned to the finding.
- firstObserved InsightAt Date Filter[] 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- generatorId InsightString Filter[] 
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- id
InsightString Filter[] 
- The security findings provider-specific identifier for a finding.
- keyword
InsightKeyword Filter[] 
- A keyword for a finding.
- lastObserved InsightAt Date Filter[] 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- malwareName InsightString Filter[] 
- The name of the malware that was observed.
- malwarePath InsightString Filter[] 
- The filesystem path of the malware that was observed.
- malwareState InsightString Filter[] 
- The state of the malware that was observed.
- malwareType InsightString Filter[] 
- The type of the malware that was observed.
- networkDestination InsightDomain String Filter[] 
- The destination domain of network-related information about a finding.
- networkDestination InsightIp V4 Ip Filter[] 
- The destination IPv4 address of network-related information about a finding.
- networkDestination InsightIp V6 Ip Filter[] 
- The destination IPv6 address of network-related information about a finding.
- networkDestination InsightPort Number Filter[] 
- The destination port of network-related information about a finding.
- networkDirection InsightString Filter[] 
- Indicates the direction of network traffic associated with a finding.
- networkProtocol InsightString Filter[] 
- The protocol of network-related information about a finding.
- networkSource InsightDomain String Filter[] 
- The source domain of network-related information about a finding.
- networkSource InsightIp V4 Ip Filter[] 
- The source IPv4 address of network-related information about a finding.
- networkSource InsightIp V6 Ip Filter[] 
- The source IPv6 address of network-related information about a finding.
- networkSource InsightMac String Filter[] 
- The source media access control (MAC) address of network-related information about a finding.
- networkSource InsightPort Number Filter[] 
- The source port of network-related information about a finding.
- noteText InsightString Filter[] 
- The text of a note.
- noteUpdated InsightAt Date Filter[] 
- The timestamp of when the note was updated.
- noteUpdated InsightBy String Filter[] 
- The principal that created a note.
- processLaunched InsightAt Date Filter[] 
- A timestamp that identifies when the process was launched.
- processName InsightString Filter[] 
- The name of the process.
- processParent InsightPid Number Filter[] 
- The parent process ID.
- processPath InsightString Filter[] 
- The path to the process executable.
- processPid InsightNumber Filter[] 
- The process ID.
- processTerminated InsightAt Date Filter[] 
- A timestamp that identifies when the process was terminated.
- productArn InsightString Filter[] 
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- productFields InsightMap Filter[] 
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- productName InsightString Filter[] 
- The name of the solution (product) that generates findings.
- recommendationText InsightString Filter[] 
- The recommendation of what to do about the issue described in a finding.
- recordState InsightString Filter[] 
- The updated record state for the finding.
- region
InsightString Filter[] 
- The Region from which the finding was generated.
- 
InsightString Filter[] 
- The solution-generated identifier for a related finding.
- 
InsightString Filter[] 
- The ARN of the solution that generated a related finding.
- resourceApplication InsightArn String Filter[] 
- The ARN of the application that is related to a finding.
- resourceApplication InsightName String Filter[] 
- The name of the application that is related to a finding.
- resourceAws InsightEc2Instance Iam Instance Profile Arn String Filter[] 
- The IAM profile ARN of the instance.
- resourceAws InsightEc2Instance Image Id String Filter[] 
- The Amazon Machine Image (AMI) ID of the instance.
- resourceAws InsightEc2Instance Ip V4Addresses Ip Filter[] 
- The IPv4 addresses associated with the instance.
- resourceAws InsightEc2Instance Ip V6Addresses Ip Filter[] 
- The IPv6 addresses associated with the instance.
- resourceAws InsightEc2Instance Key Name String Filter[] 
- The key name associated with the instance.
- resourceAws InsightEc2Instance Launched At Date Filter[] 
- The date and time the instance was launched.
- resourceAws InsightEc2Instance Subnet Id String Filter[] 
- The identifier of the subnet that the instance was launched in.
- resourceAws InsightEc2Instance Type String Filter[] 
- The instance type of the instance.
- resourceAws InsightEc2Instance Vpc Id String Filter[] 
- The identifier of the VPC that the instance was launched in.
- resourceAws InsightIam Access Key Created At Date Filter[] 
- The creation date/time of the IAM access key related to a finding.
- resourceAws InsightIam Access Key Principal Name String Filter[] 
- The name of the principal that is associated with an IAM access key.
- resourceAws InsightIam Access Key Status String Filter[] 
- The status of the IAM access key related to a finding.
- resourceAws InsightIam Access Key User Name String Filter[] 
- The user associated with the IAM access key related to a finding.
- resourceAws InsightIam User User Name String Filter[] 
- The name of an IAM user.
- resourceAws InsightS3Bucket Owner Id String Filter[] 
- The canonical user ID of the owner of the S3 bucket.
- resourceAws InsightS3Bucket Owner Name String Filter[] 
- The display name of the owner of the S3 bucket.
- resourceContainer InsightImage Id String Filter[] 
- The identifier of the image related to a finding.
- resourceContainer InsightImage Name String Filter[] 
- The name of the image related to a finding.
- resourceContainer InsightLaunched At Date Filter[] 
- A timestamp that identifies when the container was started.
- resourceContainer InsightName String Filter[] 
- The name of the container related to a finding.
- resourceDetails InsightOther Map Filter[] 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- resourceId InsightString Filter[] 
- The canonical identifier for the given resource type.
- resourcePartition InsightString Filter[] 
- The canonical AWS partition name that the Region is assigned to.
- resourceRegion InsightString Filter[] 
- The canonical AWS external Region name where this resource is located.
- 
InsightMap Filter[] 
- A list of AWS tags associated with a resource at the time the finding was processed.
- resourceType InsightString Filter[] 
- Specifies the type of the resource that details are provided for.
- sample
InsightBoolean Filter[] 
- Indicates whether or not sample findings are included in the filter results.
- severityLabel InsightString Filter[] 
- The label of a finding's severity.
- severityNormalized InsightNumber Filter[] 
- The normalized severity of a finding.
- severityProduct InsightNumber Filter[] 
- The native severity as defined by the security findings provider's solution that generated the finding.
- sourceUrl InsightString Filter[] 
- A URL that links to a page about the current finding in the security findings provider's solution.
- threatIntel InsightIndicator Category String Filter[] 
- The category of a threat intelligence indicator.
- threatIntel InsightIndicator Last Observed At Date Filter[] 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- threatIntel InsightIndicator Source String Filter[] 
- The source of the threat intelligence.
- threatIntel InsightIndicator Source Url String Filter[] 
- The URL for more details from the source of the threat intelligence.
- threatIntel InsightIndicator Type String Filter[] 
- The type of a threat intelligence indicator.
- threatIntel InsightIndicator Value String Filter[] 
- The value of a threat intelligence indicator.
- title
InsightString Filter[] 
- A finding's title.
- type
InsightString Filter[] 
- A finding type in the format of namespace/category/classifier that classifies a finding.
- updatedAt InsightDate Filter[] 
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- userDefined InsightFields Map Filter[] 
- A list of name/value string pairs associated with the finding.
- verificationState InsightString Filter[] 
- The veracity of a finding.
- vulnerabilitiesExploit InsightAvailable String Filter[] 
- Indicates whether a software vulnerability in your environment has a known exploit.
- vulnerabilitiesFix InsightAvailable String Filter[] 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- workflowState InsightString Filter[] 
- The workflow state of a finding.
- workflowStatus InsightString Filter[] 
- The status of the investigation into a finding.
- aws_account_ Sequence[Insightid String Filter] 
- The AWS account ID in which a finding is generated.
- aws_account_ Sequence[Insightname String Filter] 
- The name of the AWS account in which a finding is generated.
- company_name Sequence[InsightString Filter] 
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- compliance_associated_ Sequence[Insightstandards_ id String Filter] 
- The unique identifier of a standard in which a control is enabled.
- compliance_security_ Sequence[Insightcontrol_ id String Filter] 
- The unique identifier of a control across standards.
- compliance_security_ Sequence[Insightcontrol_ parameters_ name String Filter] 
- The name of a security control parameter.
- compliance_security_ Sequence[Insightcontrol_ parameters_ value String Filter] 
- The current value of a security control parameter.
- compliance_status Sequence[InsightString Filter] 
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- confidence
Sequence[InsightNumber Filter] 
- A finding's confidence.
- created_at Sequence[InsightDate Filter] 
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- criticality
Sequence[InsightNumber Filter] 
- The level of importance assigned to the resources associated with the finding.
- description
Sequence[InsightString Filter] 
- A finding's description.
- finding_provider_ Sequence[Insightfields_ confidence Number Filter] 
- The finding provider value for the finding confidence.
- finding_provider_ Sequence[Insightfields_ criticality Number Filter] 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- 
Sequence[InsightString Filter] 
- The finding identifier of a related finding that is identified by the finding provider.
- 
Sequence[InsightString Filter] 
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- finding_provider_ Sequence[Insightfields_ severity_ label String Filter] 
- The finding provider value for the severity label.
- finding_provider_ Sequence[Insightfields_ severity_ original String Filter] 
- The finding provider's original value for the severity.
- finding_provider_ Sequence[Insightfields_ types String Filter] 
- One or more finding types that the finding provider assigned to the finding.
- first_observed_ Sequence[Insightat Date Filter] 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- generator_id Sequence[InsightString Filter] 
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- id
Sequence[InsightString Filter] 
- The security findings provider-specific identifier for a finding.
- keyword
Sequence[InsightKeyword Filter] 
- A keyword for a finding.
- last_observed_ Sequence[Insightat Date Filter] 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- malware_name Sequence[InsightString Filter] 
- The name of the malware that was observed.
- malware_path Sequence[InsightString Filter] 
- The filesystem path of the malware that was observed.
- malware_state Sequence[InsightString Filter] 
- The state of the malware that was observed.
- malware_type Sequence[InsightString Filter] 
- The type of the malware that was observed.
- network_destination_ Sequence[Insightdomain String Filter] 
- The destination domain of network-related information about a finding.
- network_destination_ Sequence[Insightip_ v4 Ip Filter] 
- The destination IPv4 address of network-related information about a finding.
- network_destination_ Sequence[Insightip_ v6 Ip Filter] 
- The destination IPv6 address of network-related information about a finding.
- network_destination_ Sequence[Insightport Number Filter] 
- The destination port of network-related information about a finding.
- network_direction Sequence[InsightString Filter] 
- Indicates the direction of network traffic associated with a finding.
- network_protocol Sequence[InsightString Filter] 
- The protocol of network-related information about a finding.
- network_source_ Sequence[Insightdomain String Filter] 
- The source domain of network-related information about a finding.
- network_source_ Sequence[Insightip_ v4 Ip Filter] 
- The source IPv4 address of network-related information about a finding.
- network_source_ Sequence[Insightip_ v6 Ip Filter] 
- The source IPv6 address of network-related information about a finding.
- network_source_ Sequence[Insightmac String Filter] 
- The source media access control (MAC) address of network-related information about a finding.
- network_source_ Sequence[Insightport Number Filter] 
- The source port of network-related information about a finding.
- note_text Sequence[InsightString Filter] 
- The text of a note.
- note_updated_ Sequence[Insightat Date Filter] 
- The timestamp of when the note was updated.
- note_updated_ Sequence[Insightby String Filter] 
- The principal that created a note.
- process_launched_ Sequence[Insightat Date Filter] 
- A timestamp that identifies when the process was launched.
- process_name Sequence[InsightString Filter] 
- The name of the process.
- process_parent_ Sequence[Insightpid Number Filter] 
- The parent process ID.
- process_path Sequence[InsightString Filter] 
- The path to the process executable.
- process_pid Sequence[InsightNumber Filter] 
- The process ID.
- process_terminated_ Sequence[Insightat Date Filter] 
- A timestamp that identifies when the process was terminated.
- product_arn Sequence[InsightString Filter] 
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- product_fields Sequence[InsightMap Filter] 
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- product_name Sequence[InsightString Filter] 
- The name of the solution (product) that generates findings.
- recommendation_text Sequence[InsightString Filter] 
- The recommendation of what to do about the issue described in a finding.
- record_state Sequence[InsightString Filter] 
- The updated record state for the finding.
- region
Sequence[InsightString Filter] 
- The Region from which the finding was generated.
- 
Sequence[InsightString Filter] 
- The solution-generated identifier for a related finding.
- 
Sequence[InsightString Filter] 
- The ARN of the solution that generated a related finding.
- resource_application_ Sequence[Insightarn String Filter] 
- The ARN of the application that is related to a finding.
- resource_application_ Sequence[Insightname String Filter] 
- The name of the application that is related to a finding.
- resource_aws_ Sequence[Insightec2_ instance_ iam_ instance_ profile_ arn String Filter] 
- The IAM profile ARN of the instance.
- resource_aws_ Sequence[Insightec2_ instance_ image_ id String Filter] 
- The Amazon Machine Image (AMI) ID of the instance.
- resource_aws_ Sequence[Insightec2_ instance_ ip_ v4_ addresses Ip Filter] 
- The IPv4 addresses associated with the instance.
- resource_aws_ Sequence[Insightec2_ instance_ ip_ v6_ addresses Ip Filter] 
- The IPv6 addresses associated with the instance.
- resource_aws_ Sequence[Insightec2_ instance_ key_ name String Filter] 
- The key name associated with the instance.
- resource_aws_ Sequence[Insightec2_ instance_ launched_ at Date Filter] 
- The date and time the instance was launched.
- resource_aws_ Sequence[Insightec2_ instance_ subnet_ id String Filter] 
- The identifier of the subnet that the instance was launched in.
- resource_aws_ Sequence[Insightec2_ instance_ type String Filter] 
- The instance type of the instance.
- resource_aws_ Sequence[Insightec2_ instance_ vpc_ id String Filter] 
- The identifier of the VPC that the instance was launched in.
- resource_aws_ Sequence[Insightiam_ access_ key_ created_ at Date Filter] 
- The creation date/time of the IAM access key related to a finding.
- resource_aws_ Sequence[Insightiam_ access_ key_ principal_ name String Filter] 
- The name of the principal that is associated with an IAM access key.
- resource_aws_ Sequence[Insightiam_ access_ key_ status String Filter] 
- The status of the IAM access key related to a finding.
- resource_aws_ Sequence[Insightiam_ access_ key_ user_ name String Filter] 
- The user associated with the IAM access key related to a finding.
- resource_aws_ Sequence[Insightiam_ user_ user_ name String Filter] 
- The name of an IAM user.
- resource_aws_ Sequence[Insights3_ bucket_ owner_ id String Filter] 
- The canonical user ID of the owner of the S3 bucket.
- resource_aws_ Sequence[Insights3_ bucket_ owner_ name String Filter] 
- The display name of the owner of the S3 bucket.
- resource_container_ Sequence[Insightimage_ id String Filter] 
- The identifier of the image related to a finding.
- resource_container_ Sequence[Insightimage_ name String Filter] 
- The name of the image related to a finding.
- resource_container_ Sequence[Insightlaunched_ at Date Filter] 
- A timestamp that identifies when the container was started.
- resource_container_ Sequence[Insightname String Filter] 
- The name of the container related to a finding.
- resource_details_ Sequence[Insightother Map Filter] 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- resource_id Sequence[InsightString Filter] 
- The canonical identifier for the given resource type.
- resource_partition Sequence[InsightString Filter] 
- The canonical AWS partition name that the Region is assigned to.
- resource_region Sequence[InsightString Filter] 
- The canonical AWS external Region name where this resource is located.
- 
Sequence[InsightMap Filter] 
- A list of AWS tags associated with a resource at the time the finding was processed.
- resource_type Sequence[InsightString Filter] 
- Specifies the type of the resource that details are provided for.
- sample
Sequence[InsightBoolean Filter] 
- Indicates whether or not sample findings are included in the filter results.
- severity_label Sequence[InsightString Filter] 
- The label of a finding's severity.
- severity_normalized Sequence[InsightNumber Filter] 
- The normalized severity of a finding.
- severity_product Sequence[InsightNumber Filter] 
- The native severity as defined by the security findings provider's solution that generated the finding.
- source_url Sequence[InsightString Filter] 
- A URL that links to a page about the current finding in the security findings provider's solution.
- threat_intel_ Sequence[Insightindicator_ category String Filter] 
- The category of a threat intelligence indicator.
- threat_intel_ Sequence[Insightindicator_ last_ observed_ at Date Filter] 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- threat_intel_ Sequence[Insightindicator_ source String Filter] 
- The source of the threat intelligence.
- threat_intel_ Sequence[Insightindicator_ source_ url String Filter] 
- The URL for more details from the source of the threat intelligence.
- threat_intel_ Sequence[Insightindicator_ type String Filter] 
- The type of a threat intelligence indicator.
- threat_intel_ Sequence[Insightindicator_ value String Filter] 
- The value of a threat intelligence indicator.
- title
Sequence[InsightString Filter] 
- A finding's title.
- type
Sequence[InsightString Filter] 
- A finding type in the format of namespace/category/classifier that classifies a finding.
- updated_at Sequence[InsightDate Filter] 
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- user_defined_ Sequence[Insightfields Map Filter] 
- A list of name/value string pairs associated with the finding.
- verification_state Sequence[InsightString Filter] 
- The veracity of a finding.
- vulnerabilities_exploit_ Sequence[Insightavailable String Filter] 
- Indicates whether a software vulnerability in your environment has a known exploit.
- vulnerabilities_fix_ Sequence[Insightavailable String Filter] 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- workflow_state Sequence[InsightString Filter] 
- The workflow state of a finding.
- workflow_status Sequence[InsightString Filter] 
- The status of the investigation into a finding.
- awsAccount List<Property Map>Id 
- The AWS account ID in which a finding is generated.
- awsAccount List<Property Map>Name 
- The name of the AWS account in which a finding is generated.
- companyName List<Property Map>
- The name of the findings provider (company) that owns the solution (product) that generates findings.
- complianceAssociated List<Property Map>Standards Id 
- The unique identifier of a standard in which a control is enabled.
- complianceSecurity List<Property Map>Control Id 
- The unique identifier of a control across standards.
- complianceSecurity List<Property Map>Control Parameters Name 
- The name of a security control parameter.
- complianceSecurity List<Property Map>Control Parameters Value 
- The current value of a security control parameter.
- complianceStatus List<Property Map>
- Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard.
- confidence List<Property Map>
- A finding's confidence.
- createdAt List<Property Map>
- An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured.
- criticality List<Property Map>
- The level of importance assigned to the resources associated with the finding.
- description List<Property Map>
- A finding's description.
- findingProvider List<Property Map>Fields Confidence 
- The finding provider value for the finding confidence.
- findingProvider List<Property Map>Fields Criticality 
- The finding provider value for the level of importance assigned to the resources associated with the findings.
- List<Property Map>
- The finding identifier of a related finding that is identified by the finding provider.
- List<Property Map>
- The ARN of the solution that generated a related finding that is identified by the finding provider.
- findingProvider List<Property Map>Fields Severity Label 
- The finding provider value for the severity label.
- findingProvider List<Property Map>Fields Severity Original 
- The finding provider's original value for the severity.
- findingProvider List<Property Map>Fields Types 
- One or more finding types that the finding provider assigned to the finding.
- firstObserved List<Property Map>At 
- An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
- generatorId List<Property Map>
- The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
- id List<Property Map>
- The security findings provider-specific identifier for a finding.
- keyword List<Property Map>
- A keyword for a finding.
- lastObserved List<Property Map>At 
- An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured.
- malwareName List<Property Map>
- The name of the malware that was observed.
- malwarePath List<Property Map>
- The filesystem path of the malware that was observed.
- malwareState List<Property Map>
- The state of the malware that was observed.
- malwareType List<Property Map>
- The type of the malware that was observed.
- networkDestination List<Property Map>Domain 
- The destination domain of network-related information about a finding.
- networkDestination List<Property Map>Ip V4 
- The destination IPv4 address of network-related information about a finding.
- networkDestination List<Property Map>Ip V6 
- The destination IPv6 address of network-related information about a finding.
- networkDestination List<Property Map>Port 
- The destination port of network-related information about a finding.
- networkDirection List<Property Map>
- Indicates the direction of network traffic associated with a finding.
- networkProtocol List<Property Map>
- The protocol of network-related information about a finding.
- networkSource List<Property Map>Domain 
- The source domain of network-related information about a finding.
- networkSource List<Property Map>Ip V4 
- The source IPv4 address of network-related information about a finding.
- networkSource List<Property Map>Ip V6 
- The source IPv6 address of network-related information about a finding.
- networkSource List<Property Map>Mac 
- The source media access control (MAC) address of network-related information about a finding.
- networkSource List<Property Map>Port 
- The source port of network-related information about a finding.
- noteText List<Property Map>
- The text of a note.
- noteUpdated List<Property Map>At 
- The timestamp of when the note was updated.
- noteUpdated List<Property Map>By 
- The principal that created a note.
- processLaunched List<Property Map>At 
- A timestamp that identifies when the process was launched.
- processName List<Property Map>
- The name of the process.
- processParent List<Property Map>Pid 
- The parent process ID.
- processPath List<Property Map>
- The path to the process executable.
- processPid List<Property Map>
- The process ID.
- processTerminated List<Property Map>At 
- A timestamp that identifies when the process was terminated.
- productArn List<Property Map>
- The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
- productFields List<Property Map>
- A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format.
- productName List<Property Map>
- The name of the solution (product) that generates findings.
- recommendationText List<Property Map>
- The recommendation of what to do about the issue described in a finding.
- recordState List<Property Map>
- The updated record state for the finding.
- region List<Property Map>
- The Region from which the finding was generated.
- List<Property Map>
- The solution-generated identifier for a related finding.
- List<Property Map>
- The ARN of the solution that generated a related finding.
- resourceApplication List<Property Map>Arn 
- The ARN of the application that is related to a finding.
- resourceApplication List<Property Map>Name 
- The name of the application that is related to a finding.
- resourceAws List<Property Map>Ec2Instance Iam Instance Profile Arn 
- The IAM profile ARN of the instance.
- resourceAws List<Property Map>Ec2Instance Image Id 
- The Amazon Machine Image (AMI) ID of the instance.
- resourceAws List<Property Map>Ec2Instance Ip V4Addresses 
- The IPv4 addresses associated with the instance.
- resourceAws List<Property Map>Ec2Instance Ip V6Addresses 
- The IPv6 addresses associated with the instance.
- resourceAws List<Property Map>Ec2Instance Key Name 
- The key name associated with the instance.
- resourceAws List<Property Map>Ec2Instance Launched At 
- The date and time the instance was launched.
- resourceAws List<Property Map>Ec2Instance Subnet Id 
- The identifier of the subnet that the instance was launched in.
- resourceAws List<Property Map>Ec2Instance Type 
- The instance type of the instance.
- resourceAws List<Property Map>Ec2Instance Vpc Id 
- The identifier of the VPC that the instance was launched in.
- resourceAws List<Property Map>Iam Access Key Created At 
- The creation date/time of the IAM access key related to a finding.
- resourceAws List<Property Map>Iam Access Key Principal Name 
- The name of the principal that is associated with an IAM access key.
- resourceAws List<Property Map>Iam Access Key Status 
- The status of the IAM access key related to a finding.
- resourceAws List<Property Map>Iam Access Key User Name 
- The user associated with the IAM access key related to a finding.
- resourceAws List<Property Map>Iam User User Name 
- The name of an IAM user.
- resourceAws List<Property Map>S3Bucket Owner Id 
- The canonical user ID of the owner of the S3 bucket.
- resourceAws List<Property Map>S3Bucket Owner Name 
- The display name of the owner of the S3 bucket.
- resourceContainer List<Property Map>Image Id 
- The identifier of the image related to a finding.
- resourceContainer List<Property Map>Image Name 
- The name of the image related to a finding.
- resourceContainer List<Property Map>Launched At 
- A timestamp that identifies when the container was started.
- resourceContainer List<Property Map>Name 
- The name of the container related to a finding.
- resourceDetails List<Property Map>Other 
- The details of a resource that doesn't have a specific subfield for the resource type defined.
- resourceId List<Property Map>
- The canonical identifier for the given resource type.
- resourcePartition List<Property Map>
- The canonical AWS partition name that the Region is assigned to.
- resourceRegion List<Property Map>
- The canonical AWS external Region name where this resource is located.
- List<Property Map>
- A list of AWS tags associated with a resource at the time the finding was processed.
- resourceType List<Property Map>
- Specifies the type of the resource that details are provided for.
- sample List<Property Map>
- Indicates whether or not sample findings are included in the filter results.
- severityLabel List<Property Map>
- The label of a finding's severity.
- severityNormalized List<Property Map>
- The normalized severity of a finding.
- severityProduct List<Property Map>
- The native severity as defined by the security findings provider's solution that generated the finding.
- sourceUrl List<Property Map>
- A URL that links to a page about the current finding in the security findings provider's solution.
- threatIntel List<Property Map>Indicator Category 
- The category of a threat intelligence indicator.
- threatIntel List<Property Map>Indicator Last Observed At 
- A timestamp that identifies the last observation of a threat intelligence indicator.
- threatIntel List<Property Map>Indicator Source 
- The source of the threat intelligence.
- threatIntel List<Property Map>Indicator Source Url 
- The URL for more details from the source of the threat intelligence.
- threatIntel List<Property Map>Indicator Type 
- The type of a threat intelligence indicator.
- threatIntel List<Property Map>Indicator Value 
- The value of a threat intelligence indicator.
- title List<Property Map>
- A finding's title.
- type List<Property Map>
- A finding type in the format of namespace/category/classifier that classifies a finding.
- updatedAt List<Property Map>
- An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record.
- userDefined List<Property Map>Fields 
- A list of name/value string pairs associated with the finding.
- verificationState List<Property Map>
- The veracity of a finding.
- vulnerabilitiesExploit List<Property Map>Available 
- Indicates whether a software vulnerability in your environment has a known exploit.
- vulnerabilitiesFix List<Property Map>Available 
- Indicates whether a vulnerability is fixed in a newer version of the affected software packages.
- workflowState List<Property Map>
- The workflow state of a finding.
- workflowStatus List<Property Map>
- The status of the investigation into a finding.
InsightBooleanFilter, InsightBooleanFilterArgs      
- Value bool
- The value of the boolean.
- Value bool
- The value of the boolean.
- value Boolean
- The value of the boolean.
- value boolean
- The value of the boolean.
- value bool
- The value of the boolean.
- value Boolean
- The value of the boolean.
InsightDateFilter, InsightDateFilterArgs      
- DateRange Pulumi.Aws Native. Security Hub. Inputs. Insight Date Range 
- A date range for the date filter.
- End string
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- Start string
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- DateRange InsightDate Range 
- A date range for the date filter.
- End string
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- Start string
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- dateRange InsightDate Range 
- A date range for the date filter.
- end String
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- start String
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- dateRange InsightDate Range 
- A date range for the date filter.
- end string
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- start string
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- date_range InsightDate Range 
- A date range for the date filter.
- end str
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- start str
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- dateRange Property Map
- A date range for the date filter.
- end String
- A timestamp that provides the end date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
- start String
- A timestamp that provides the start date for the date filter. - For more information about the validation and formatting of timestamp fields in AWS Security Hub , see Timestamps . 
InsightDateRange, InsightDateRangeArgs      
- Unit
Pulumi.Aws Native. Security Hub. Insight Date Range Unit 
- A date range unit for the date filter.
- Value double
- A date range value for the date filter.
- Unit
InsightDate Range Unit 
- A date range unit for the date filter.
- Value float64
- A date range value for the date filter.
- unit
InsightDate Range Unit 
- A date range unit for the date filter.
- value Double
- A date range value for the date filter.
- unit
InsightDate Range Unit 
- A date range unit for the date filter.
- value number
- A date range value for the date filter.
- unit
InsightDate Range Unit 
- A date range unit for the date filter.
- value float
- A date range value for the date filter.
InsightDateRangeUnit, InsightDateRangeUnitArgs        
- Days
- DAYS
- InsightDate Range Unit Days 
- DAYS
- Days
- DAYS
- Days
- DAYS
- DAYS
- DAYS
- "DAYS"
- DAYS
InsightIpFilter, InsightIpFilterArgs      
- Cidr string
- A finding's CIDR value.
- Cidr string
- A finding's CIDR value.
- cidr String
- A finding's CIDR value.
- cidr string
- A finding's CIDR value.
- cidr str
- A finding's CIDR value.
- cidr String
- A finding's CIDR value.
InsightKeywordFilter, InsightKeywordFilterArgs      
- Value string
- A value for the keyword.
- Value string
- A value for the keyword.
- value String
- A value for the keyword.
- value string
- A value for the keyword.
- value str
- A value for the keyword.
- value String
- A value for the keyword.
InsightMapFilter, InsightMapFilterArgs      
- Comparison
Pulumi.Aws Native. Security Hub. Insight Map Filter Comparison 
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- Key string
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- Value string
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
- Comparison
InsightMap Filter Comparison 
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- Key string
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- Value string
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
- comparison
InsightMap Filter Comparison 
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- key String
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- value String
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
- comparison
InsightMap Filter Comparison 
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- key string
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- value string
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
- comparison
InsightMap Filter Comparison 
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- key str
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- value str
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
- comparison "EQUALS" | "NOT_EQUALS"
- The condition to apply to the key value when filtering Security Hub findings with a map filter.
- key String
- The key of the map filter. For example, for ResourceTags,Keyidentifies the name of the tag. ForUserDefinedFields,Keyis the name of the field.
- value String
- The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called Departmentmight beSecurity. If you providesecurityas the filter value, then there's no match.
InsightMapFilterComparison, InsightMapFilterComparisonArgs        
- EqualsValue 
- EQUALS
- NotEquals 
- NOT_EQUALS
- InsightMap Filter Comparison Equals 
- EQUALS
- InsightMap Filter Comparison Not Equals 
- NOT_EQUALS
- Equals
- EQUALS
- NotEquals 
- NOT_EQUALS
- Equals
- EQUALS
- NotEquals 
- NOT_EQUALS
- EQUALS
- EQUALS
- NOT_EQUALS
- NOT_EQUALS
- "EQUALS"
- EQUALS
- "NOT_EQUALS"
- NOT_EQUALS
InsightNumberFilter, InsightNumberFilterArgs      
InsightStringFilter, InsightStringFilterArgs      
- Comparison
Pulumi.Aws Native. Security Hub. Insight String Filter Comparison 
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- Value string
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
- Comparison
InsightString Filter Comparison 
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- Value string
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
- comparison
InsightString Filter Comparison 
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- value String
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
- comparison
InsightString Filter Comparison 
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- value string
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
- comparison
InsightString Filter Comparison 
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- value str
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
- comparison "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS"
- The condition to apply to a string value when filtering Security Hub findings. - To search for values that have the filter value, use one of the following comparison operators: - To search for values that include the filter value, use CONTAINS. For example, the filterTitle CONTAINS CloudFrontmatches findings that have aTitlethat includes the string CloudFront.
- To search for values that exactly match the filter value, use EQUALS. For example, the filterAwsAccountId EQUALS 123456789012only matches findings that have an account ID of123456789012.
- To search for values that start with the filter value, use PREFIX. For example, the filterResourceRegion PREFIX usmatches findings that have aResourceRegionthat starts withus. AResourceRegionthat starts with a different value, such asaf,ap, orca, doesn't match.
 - CONTAINS,- EQUALS, and- PREFIXfilters on the same field are joined by- OR. A finding matches if it matches any one of those filters. For example, the filters- Title CONTAINS CloudFront OR Title CONTAINS CloudWatchmatch a finding that includes either- CloudFront,- CloudWatch, or both strings in the title.- To search for values that don’t have the filter value, use one of the following comparison operators: - To search for values that exclude the filter value, use NOT_CONTAINS. For example, the filterTitle NOT_CONTAINS CloudFrontmatches findings that have aTitlethat excludes the string CloudFront.
- To search for values other than the filter value, use NOT_EQUALS. For example, the filterAwsAccountId NOT_EQUALS 123456789012only matches findings that have an account ID other than123456789012.
- To search for values that don't start with the filter value, use PREFIX_NOT_EQUALS. For example, the filterResourceRegion PREFIX_NOT_EQUALS usmatches findings with aResourceRegionthat starts with a value other thanus.
 - NOT_CONTAINS,- NOT_EQUALS, and- PREFIX_NOT_EQUALSfilters on the same field are joined by- AND. A finding matches only if it matches all of those filters. For example, the filters- Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatchmatch a finding that excludes both- CloudFrontand- CloudWatchin the title.- You can’t have both a - CONTAINSfilter and a- NOT_CONTAINSfilter on the same field. Similarly, you can't provide both an- EQUALSfilter and a- NOT_EQUALSor- PREFIX_NOT_EQUALSfilter on the same field. Combining filters in this way returns an error.- CONTAINSfilters can only be used with other- CONTAINSfilters.- NOT_CONTAINSfilters can only be used with other- NOT_CONTAINSfilters.- You can combine - PREFIXfilters with- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters for the same field. Security Hub first processes the- PREFIXfilters, and then the- NOT_EQUALSor- PREFIX_NOT_EQUALSfilters.- For example, for the following filters, Security Hub first identifies findings that have resource types that start with either - AwsIamor- AwsEc2. It then excludes findings that have a resource type of- AwsIamPolicyand findings that have a resource type of- AwsEc2NetworkInterface.- ResourceType PREFIX AwsIam
- ResourceType PREFIX AwsEc2
- ResourceType NOT_EQUALS AwsIamPolicy
- ResourceType NOT_EQUALS AwsEc2NetworkInterface
 - CONTAINSand- NOT_CONTAINSoperators can be used only with automation rules. For more information, see Automation rules in the AWS Security Hub User Guide .
- To search for values that include the filter value, use 
- value String
- The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you providesecurity hubas the filter value, there's no match.
InsightStringFilterComparison, InsightStringFilterComparisonArgs        
- EqualsValue 
- EQUALS
- Prefix
- PREFIX
- NotEquals 
- NOT_EQUALS
- PrefixNot Equals 
- PREFIX_NOT_EQUALS
- InsightString Filter Comparison Equals 
- EQUALS
- InsightString Filter Comparison Prefix 
- PREFIX
- InsightString Filter Comparison Not Equals 
- NOT_EQUALS
- InsightString Filter Comparison Prefix Not Equals 
- PREFIX_NOT_EQUALS
- Equals
- EQUALS
- Prefix
- PREFIX
- NotEquals 
- NOT_EQUALS
- PrefixNot Equals 
- PREFIX_NOT_EQUALS
- Equals
- EQUALS
- Prefix
- PREFIX
- NotEquals 
- NOT_EQUALS
- PrefixNot Equals 
- PREFIX_NOT_EQUALS
- EQUALS
- EQUALS
- PREFIX
- PREFIX
- NOT_EQUALS
- NOT_EQUALS
- PREFIX_NOT_EQUALS
- PREFIX_NOT_EQUALS
- "EQUALS"
- EQUALS
- "PREFIX"
- PREFIX
- "NOT_EQUALS"
- NOT_EQUALS
- "PREFIX_NOT_EQUALS"
- PREFIX_NOT_EQUALS
Package Details
- Repository
- AWS Native pulumi/pulumi-aws-native
- License
- Apache-2.0
We recommend new projects start with resources from the AWS provider.