FindingHistoryRecord
A list of events that changed the specified finding during the specified time period. Each record represents a single finding change event.
Contents
- FindingCreated
-
Identifies whether the event marks the creation of a new finding. A value of
Truemeans that the finding is newly created. A value ofFalsemeans that the finding isn’t newly created.Type: Boolean
Required: No
- FindingIdentifier
-
Identifies which finding to get the finding history for.
Type: AwsSecurityFindingIdentifier object
Required: No
- NextToken
-
A token for pagination purposes. Provide this token in the subsequent request to
GetFindingsHistoryto get up to an additional 100 results of history for the same finding that you specified in your initial request.Type: String
Required: No
- Updates
-
An array of objects that provides details about the finding change event, including the AWS Security Finding Format (ASFF) field that changed, the value of the field before the change, and the value of the field after the change.
Type: Array of FindingHistoryUpdate objects
Required: No
- UpdateSource
-
Identifies the source of the event that changed the finding. For example, an integrated AWS service or third-party partner integration may call
BatchImportFindings, or an AWS Security Hub customer may callBatchUpdateFindings.Type: FindingHistoryUpdateSource object
Required: No
- UpdateTime
-
A timestamp that indicates when Security Hub processed the updated finding record.
For more information about the validation and formatting of timestamp fields in AWS Security Hub, see Timestamps.
Type: Timestamp
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
