Adding workbook for AWS Security Hub Compliance by samikroy · Pull Request #13870 · Azure/Azure-Sentinel

samikroy · 2026-03-20T13:30:13Z

Required items, please complete

This workbook contains the below details

Severity Analysis
- Pie chart: Findings distribution by severity
- Color-coded: CRITICAL (red), HIGH (orange), MEDIUM (yellow), LOW (blue)
Compliance Tracking
- Pie chart: PASSED vs FAILED compliance status
- Bar chart: Failed findings by compliance standard (CIS, NIST, PCI)
Trend Analysis
- Line chart: Findings over time by severity
- Area chart: Compliance status trend
Top Failing Controls
- Table: Top 20 security controls with most findings
- Shows: Control ID, Title, Finding count, Severity breakdown, Affected accounts
Account Security Posture
- Table: Per-account summary with compliance rate
- Metrics: Total findings, Critical/High/Medium/Low counts, Pass/Fail ratio
Regional Distribution
- Bar chart: Top 10 AWS regions by finding count
Compliance Standards
- Table: Findings by standard (CIS, NIST, PCI, ISO, HIPAA, SOC 2)
- Compliance rate calculation
Resource Type Analysis
- Table: Top 15 resource types with findings
- Breakdown: IAM policies, EC2 instances, Security Groups, SQS queues, etc.
Detailed Findings View
- Table: Latest 100 failed findings with drill-down
- Fields: Time, Account, Region, Control, Severity, Title, Resource
Service-Specific Views
- IAM security findings table
- EC2 security findings table

Interactive Filters

Time Range: Last hour → Last 90 days (or custom)
AWS Account: Filter by specific account(s) or all
AWS Region: Filter by region(s) or all
Compliance Status: PASSED, FAILED, WARNING, NOT_AVAILABLE, or all

Reason for Change(s):
- New Workbook addition.
Version Updated:
- New Version
Testing Completed:
- Yes

…anceWorkbook.json

v-shukore · 2026-03-27T06:43:59Z

Hi @samikroy, please add new workbook in data file and package the solution using V3 tool
https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md

samikroy · 2026-03-27T10:49:58Z

Hi @samikroy, please add new workbook in data file and package the solution using V3 tool https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md

@v-shukore - Added as requested, please review and let know for any inputs.

v-shukore · 2026-03-31T05:39:36Z

Hi @samikroy, please repackage this solution as well using V3 tool. Thanks!!
https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md

samikroy · 2026-04-15T13:13:47Z

Hi @v-shukore , I’ve repackaged the AWS Security Hub solution using the V3 tool. Please review.

Copilot

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds an AWS Security Hub compliance-focused workbook and wires it into workbook metadata and the AWS Security Hub solution content definition.

Changes:

Added a new “AWS Security Hub Compliance” workbook (added in both Workbooks/ and Solutions/AWS Security Hub/Workbooks/).
Registered the workbook in Workbooks/WorkbooksMetadata.json.
Updated the AWS Security Hub solution data to include the workbook and a workbook blade description.

Reviewed changes

Copilot reviewed 6 out of 8 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
Workbooks/WorkbooksMetadata.json	Adds a metadata entry so the new workbook can appear in the workbook gallery.
Workbooks/AWSSecurityHubComplianceWorkbook.json	New workbook template (root Workbooks location).
Solutions/AWS Security Hub/Workbooks/AWSSecurityHubComplianceWorkbook.json	New workbook template (solution-scoped location).
Solutions/AWS Security Hub/Data/Solution_AWSSecurityHub.json	Attempts to include the workbook in the solution’s content definition.
Solutions/AWS Security Hub/Package/mainTemplate.json	Updates packaged solution versioning/strings (not reviewed per repo ignore rules).
Solutions/AWS Security Hub/Package/createUiDefinition.json	Adds a Workbooks blade section (not reviewed per repo ignore rules).

Comments suppressed due to low confidence (2)

Solutions/AWS Security Hub/Workbooks/AWSSecurityHubComplianceWorkbook.json:1

This workbook is added twice with (apparently) identical content: once under Workbooks/ and once under Solutions/AWS Security Hub/Workbooks/. Keeping duplicate copies is likely to drift over time. Prefer a single source of truth (either solution-scoped or root workbooks), and reference that path consistently from workbook metadata / solution content.
Solutions/AWS Security Hub/Workbooks/AWSSecurityHubComplianceWorkbook.json:1
This workbook is added twice with (apparently) identical content: once under Workbooks/ and once under Solutions/AWS Security Hub/Workbooks/. Keeping duplicate copies is likely to drift over time. Prefer a single source of truth (either solution-scoped or root workbooks), and reference that path consistently from workbook metadata / solution content.

v-shukore · 2026-04-20T13:37:00Z

Hi @samikroy,please update required suggestions given by the copilot as reviewer and commit the changes. Thanks!

…into patch-61

samikroy · 2026-05-19T13:16:35Z

Hi @v-shukore , I've repackaged the solution using the V3 tool, and ensured the zip files are in sync. All CI checks are passing. Could you please review? Thank you!

v-shukore · 2026-05-20T04:13:14Z

Hi @samikroy, please do not delete the existing zip packages from the solution. Uncommit the deleted zip packages and include only the newly created 3.0.3 zip package in this PR. There’s no need to modify or remove other zip packages. The new zip file and the outside zip maintemplate should match. Thanks!

samikroy · 2026-05-20T05:39:28Z

Hi @v-shukore , I have restored the previous zip packages (3.0.0, 3.0.1, 3.0.2) and kept the newly created 3.0.3 zip package as well. Please review. Thank you!

v-shukore · 2026-05-21T11:41:20Z

Hi @samikroy, still inside zip and outside zip maintemplate are not same its diffrent please look once into it. Thanks!

…into patch-61

samikroy · 2026-05-25T02:08:13Z

Hi @v-shukore , I have regenerated the package using the V3 tool. The mainTemplate.json inside and outside the zip are now in sync. Please review. Thanks!

v-shukore · 2026-05-26T05:11:00Z

Hi @samikroy, ARM-TTK is failing because of below error please fix it. Thanks!

samikroy · 2026-05-27T03:33:31Z

Hi @v-shukore , I have fixed the ARM-TTK validation errors in createUiDefinition.json:

Fixed empty label and text fields (were null, now have proper values)
Added workbook1-name to the outputs section
Please review. Thank you!

v-shukore · 2026-05-27T05:30:42Z

Hi @samikroy, please update inside zip createui as well. Thanks!

…book1-name

samikroy · 2026-05-27T06:04:31Z

Hi @v-shukore , I have updated the createUiDefinition.json inside the 3.0.3 zip as well. Both inside and outside zip are now in sync with the fixes applied.

samikroy · 2026-05-28T12:44:24Z

Thank you for your support @v-atulyadav , @v-shukore , @v-dvedak

samikroy added 9 commits March 20, 2026 18:39

Adding new workbook

849fb3d

Adding a new workbook

8ac8b36

Update WorkbooksMetadata.json

b50d2b2

Update WorkbooksMetadata.json

560d017

Add files via upload

af79e9a

Rename AWSSecurityHubComplianceDashboard.json to AWSSecurityHubCompli…

b653b8c

…anceWorkbook.json

Rename AWSSecurityHubComplianceDashboard.json to AWSSecurityHubCompli…

039c1e8

…anceWorkbook.json

Update header title in compliance workbook JSON

6b1771f

Rename Compliance Dashboard to Compliance Workbook

f8ee79f

samikroy requested review from a team as code owners March 20, 2026 13:30

v-atulyadav assigned v-shukore Mar 23, 2026

v-atulyadav added Workbook Workbook specialty review needed Solution Solution specialty review needed labels Mar 23, 2026

samikroy added 2 commits March 27, 2026 13:12

Merge branch 'master' into patch-61

0afbd18

Update Solution_AWSSecurityHub.json

5ca2fcb

samikroy added 2 commits April 14, 2026 22:12

i Fixed workbook and repackaged solution using V3 tool

188d776

Merge branch 'master' into patch-61

df433cd

samikroy added 2 commits April 16, 2026 21:44

Reverted WorkbooksMetadata.json to correct version

604f4d2

Resolved merge conflict in WorkbooksMetadata.json

51888c8

v-shukore requested a review from Copilot April 20, 2026 12:40

Copilot AI reviewed Apr 20, 2026

View reviewed changes

Update AWS Security Hub workbook metadata

2ec16b3

Merge branch 'patch-61' of https://github.com/samikroy/Azure-Sentinel …

8df9550

…into patch-61

Restore previous zip packages 3.0.0, 3.0.1, 3.0.2 as requested.

eb64e91

samikroy added 4 commits May 22, 2026 15:53

Update Solution_AWSSecurityHub.json

7761f3d

Update author contact information in JSON file

7f32bba

Regenerate package to sync mainTemplate inside and outside zip

61aa260

Merge branch 'patch-61' of https://github.com/samikroy/Azure-Sentinel …

9e08418

…into patch-61

Fix createUiDefinition - add label, text and workbook1-name to outputs

8ee5f19

Update createUiDefinition inside 3.0.3 zip - fix label, text and work…

a6b7c59

…book1-name

v-shukore added 2 commits May 27, 2026 17:14

resolved arm-ttk

53352b9

Update ReleaseNotes.md

2989f2a

v-shukore previously approved these changes May 28, 2026

View reviewed changes

v-atulyadav previously approved these changes May 28, 2026

View reviewed changes

v-dvedak previously approved these changes May 28, 2026

View reviewed changes

Merge branch 'master' into pr/13870

acabd26

v-shukore dismissed stale reviews from v-dvedak, v-atulyadav, and themself via acabd26 May 28, 2026 12:22

v-shukore approved these changes May 28, 2026

View reviewed changes

v-atulyadav approved these changes May 28, 2026

View reviewed changes

v-atulyadav merged commit 283cc68 into Azure:master May 28, 2026
64 checks passed

Conversation

samikroy commented Mar 20, 2026

Interactive Filters

Uh oh!

v-shukore commented Mar 27, 2026

Uh oh!

samikroy commented Mar 27, 2026

Uh oh!

v-shukore commented Mar 31, 2026

Uh oh!

samikroy commented Apr 15, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

v-shukore commented Apr 20, 2026

Uh oh!

samikroy commented May 19, 2026

Uh oh!

v-shukore commented May 20, 2026

Uh oh!

samikroy commented May 20, 2026

Uh oh!

v-shukore commented May 21, 2026

Uh oh!

samikroy commented May 25, 2026

Uh oh!

v-shukore commented May 26, 2026

Uh oh!

samikroy commented May 27, 2026

Uh oh!

v-shukore commented May 27, 2026

Uh oh!

samikroy commented May 27, 2026

Uh oh!

Uh oh!

samikroy commented May 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants