Skip to content

[aws] Security Hub integration to ingest managed insights #9719

@chrisberkhout

Description

@chrisberkhout

Our AWS integration can collect insights and findings from AWS Security Hub.

For insights, we use the GetInsights endpoint of the Security Hub API, and receive all custom insights, since we don't request specific ARNs. However, there are also managed insights, which will only be returned if they are requested by ARN.

There are 35 managed insight ARNs listed in the AWS Security Hub documentation. Our integration could make request for a hard-coded list of managed insight URNs. (The API doesn't provide any way to list managed insight ARNs).

Note that this would need to be implemented with separate requests for the managed insights (requested by ARN) and the custom insights (requested without ARNs).

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions