AWS::SecurityHub::AutomationRule AutomationRulesAction

One or more actions to update finding fields if a finding matches the defined criteria of the rule.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "FindingFieldsUpdate" : AutomationRulesFindingFieldsUpdate,
  "Type" : String
}

YAML

  FindingFieldsUpdate: 
    AutomationRulesFindingFieldsUpdate
  Type: String

Properties

FindingFieldsUpdate

Specifies that the automation rule action is an update to a finding field.

Required: Yes

Type: AutomationRulesFindingFieldsUpdate

Update requires: No interruption

Type

Specifies that the rule action should update the Types finding field. The Types finding field classifies findings in the format of namespace/category/classifier. For more information, see Types taxonomy for ASFF in the AWS Security Hub User Guide.

Required: Yes

Type: String

Allowed values: FINDING_FIELDS_UPDATE

Update requires: No interruption