SNS 通知の例 - AWS での自動化されたセキュリティ対応

SNS 通知の例

修復が開始された場合

{ "severity": "INFO", "message": "00000000-0000-0000-0000-000000000000: Remediation queued for SC control RDS.13 in account 111111111111", "finding": { "finding_id": "22222222-2222-2222-2222-222222222222", "finding_description": "This control checks if automatic minor version upgrades are enabled for the Amazon RDS database instance.", "standard_name": "security-control", "standard_version": "2.0.0", "standard_control": "RDS.13", "title": "RDS automatic minor version upgrades should be enabled", "region": "us-east-1", "account": "111111111111", "finding_arn": "arn:aws:securityhub:us-east-1:111111111111:security-control/RDS.13/finding/22222222-2222-2222-2222-222222222222" } }

修復が成功した場合

{ "severity": "INFO", "message": "00000000-0000-0000-0000-000000000000: Remediation succeeded for SC control RDS.13 in account 111111111111: See Automation Execution output for details (AwsRdsDbInstance arn:aws:rds:us-east-1:111111111111:db:database-1)", "finding": { "finding_id": "22222222-2222-2222-2222-222222222222", "finding_description": "This control checks if automatic minor version upgrades are enabled for the Amazon RDS database instance.", "standard_name": "security-control", "standard_version": "2.0.0", "standard_control": "RDS.13", "title": "RDS automatic minor version upgrades should be enabled", "region": "us-east-1", "account": "111111111111", "finding_arn": "arn:aws:securityhub:us-east-1:111111111111:security-control/RDS.13/finding/22222222-2222-2222-2222-222222222222" } }

修復に失敗した場合

{ "severity": "ERROR", "message": "00000000-0000-0000-0000-000000000000: Remediation failed for SC control RDS.13 in account 111111111111: See Automation Execution output for details (AwsRdsDbInstance arn:aws:rds:us-east-1:111111111111:db:database-1)", "finding": { "finding_id": "22222222-2222-2222-2222-222222222222", "finding_description": "This control checks if automatic minor version upgrades are enabled for the Amazon RDS database instance.", "standard_name": "security-control", "standard_version": "2.0.0", "standard_control": "RDS.13", "title": "RDS automatic minor version upgrades should be enabled", "region": "us-east-1", "account": "111111111111", "finding_arn": "arn:aws:securityhub:us-east-1:111111111111:security-control/RDS.13/finding/22222222-2222-2222-2222-222222222222" } }