Class: Aws::SecurityHub::Types::Workflow

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb

Overview

Note:

When making an API call, you may pass Workflow data as a hash:

{
  status: "NEW", # accepts NEW, NOTIFIED, RESOLVED, SUPPRESSED
}

Provides information about the status of the investigation into a finding.

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#statusString

The status of the investigation into the finding. The workflow status is specific to an individual finding. It does not affect the generation of new findings. For example, setting the workflow status to SUPPRESSED or RESOLVED does not prevent a new finding for the same issue.

The allowed values are the following.

  • NEW - The initial state of a finding, before it is reviewed.

    Security Hub also resets the workflow status from NOTIFIED or RESOLVED to NEW in the following cases:

    • RecordState changes from ARCHIVED to ACTIVE.

    • ComplianceStatus changes from PASSED to either WARNING, FAILED, or NOT_AVAILABLE.

  • NOTIFIED - Indicates that you notified the resource owner about the security issue. Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.

  • SUPPRESSED - Indicates that you reviewed the finding and do not believe that any action is needed. The finding is no longer updated.

  • RESOLVED - The finding was reviewed and remediated and is now considered resolved.

Returns:

  • (String)


35185
35186
35187
35188
35189
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 35185

class Workflow < Struct.new(
  :status)
  SENSITIVE = []
  include Aws::Structure
end