Findings - Publication Configuration

The Publication Configuration resource for findings provides settings for publishing findings to AWS Security Hub. With these settings, you can configure Amazon Macie to automatically publish all policy findings, all sensitive data findings, or both policy and sensitive data findings to Security Hub. This doesn't include findings that were suppressed (automatically archived) by a findings filter. You can also use these settings to stop publishing any findings to Security Hub. To learn more about how Macie publishes findings to Security Hub, see Evaluating findings with AWS Security Hub in the Amazon Macie User Guide.

Security Hub is a service that provides you with a comprehensive view of your security state across your AWS environment. It also helps you check your environment against security industry standards and best practices. It does this partly by consuming, aggregating, organizing, and prioritizing findings from multiple AWS services and supported AWS Partner Network (APN) security solutions. It helps you analyze your security trends and identify the highest priority security issues. To learn more about Security Hub, see the AWS Security Hub User Guide.

You can use the Publication Configuration resource for findings to retrieve information about or update your configuration settings for publishing findings to Security Hub automatically. If you configure Macie to publish policy findings to Security Hub, Macie publishes updates to those findings on a recurring basis. To specify the publication frequency for these updates, use the Account Administration resource.

URI

/findings-publication-configuration

HTTP methods

GET

Operation ID: GetFindingsPublicationConfiguration

Retrieves the configuration settings for publishing findings to AWS Security Hub.

PUT

Operation ID: PutFindingsPublicationConfiguration

Updates the configuration settings for publishing findings to AWS Security Hub.

Schemas

Request bodies

{
  "clientToken": "string",
  "securityHubConfiguration": {
    "publishClassificationFindings": boolean,
    "publishPolicyFindings": boolean
  }
}

Response bodies

{
  "securityHubConfiguration": {
    "publishClassificationFindings": boolean,
    "publishPolicyFindings": boolean
  }
}

{
  "message": "string"
}

{
  "message": "string"
}

{
  "message": "string"
}

{
  "message": "string"
}

{
  "message": "string"
}

{
  "message": "string"
}

{
  "message": "string"
}

Properties

AccessDeniedException

Provides information about an error that occurred due to insufficient access to a specified resource.

ConflictException

Provides information about an error that occurred due to a versioning conflict for a specified resource.

GetFindingsPublicationConfigurationResponse

Provides information about the current configuration settings for publishing findings to AWS Security Hub automatically.

InternalServerException

Provides information about an error that occurred due to an unknown internal server error, exception, or failure.

PutFindingsPublicationConfigurationRequest

Specifies configuration settings for publishing findings to AWS Security Hub automatically.

ResourceNotFoundException

Provides information about an error that occurred because a specified resource wasn't found.

SecurityHubConfiguration

Specifies configuration settings that determine which findings are published to AWS Security Hub automatically. For information about how Macie publishes findings to Security Hub, see Evaluating findings with AWS Security Hub in the Amazon Macie User Guide.

ServiceQuotaExceededException

Provides information about an error that occurred due to one or more service quotas for an account.

ThrottlingException

Provides information about an error that occurred because too many requests were sent during a certain amount of time.

ValidationException

Provides information about an error that occurred due to a syntax error in a request.

See also

For more information about using this API in one of the language-specific AWS SDKs and references, see the following:

GetFindingsPublicationConfiguration

PutFindingsPublicationConfiguration