AWS::SecurityHub::AutomationRuleV2 CompositeFilter

Enables the creation of filtering criteria for security findings.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "BooleanFilters" : [ OcsfBooleanFilter, ... ],
  "DateFilters" : [ OcsfDateFilter, ... ],
  "MapFilters" : [ OcsfMapFilter, ... ],
  "NumberFilters" : [ OcsfNumberFilter, ... ],
  "Operator" : String,
  "StringFilters" : [ OcsfStringFilter, ... ]
}

YAML

  BooleanFilters: 
    - OcsfBooleanFilter
  DateFilters: 
    - OcsfDateFilter
  MapFilters: 
    - OcsfMapFilter
  NumberFilters: 
    - OcsfNumberFilter
  Operator: String
  StringFilters: 
    - OcsfStringFilter

Properties

BooleanFilters

Enables filtering based on boolean field values.

Required: No

Type: Array of OcsfBooleanFilter

Minimum: 1

Maximum: 20

Update requires: No interruption

DateFilters

Enables filtering based on date and timestamp fields.

Required: No

Type: Array of OcsfDateFilter

Minimum: 1

Maximum: 20

Update requires: No interruption

MapFilters

Enables the creation of filtering criteria for security findings.

Required: No

Type: Array of OcsfMapFilter

Minimum: 1

Maximum: 20

Update requires: No interruption

NumberFilters

Enables filtering based on numerical field values.

Required: No

Type: Array of OcsfNumberFilter

Minimum: 1

Maximum: 20

Update requires: No interruption

Operator

The logical operator used to combine multiple filter conditions.

Required: No

Type: String

Allowed values: AND | OR

Update requires: No interruption

StringFilters

Enables filtering based on string field values.

Required: No

Type: Array of OcsfStringFilter

Minimum: 1

Maximum: 20

Update requires: No interruption