AutomationRulesFindingFieldsUpdate - AWS Security Hub

AutomationRulesFindingFieldsUpdate

Identifies the finding fields that the automation rule action updates when a finding matches the defined criteria.

Contents

Confidence

The rule action updates the Confidence field of a finding.

Type: Integer

Valid Range: Minimum value of 0. Maximum value of 100.

Required: No

Criticality

The rule action updates the Criticality field of a finding.

Type: Integer

Valid Range: Minimum value of 0. Maximum value of 100.

Required: No

Note

The updated note.

Type: NoteUpdate object

Required: No

RelatedFindings

The rule action updates the RelatedFindings field of a finding.

Type: Array of RelatedFinding objects

Required: No

Severity

Updates to the severity information for a finding.

Type: SeverityUpdate object

Required: No

Types

The rule action updates the Types field of a finding.

Type: Array of strings

Pattern: .*\S.*

Required: No

UserDefinedFields

The rule action updates the UserDefinedFields field of a finding.

Type: String to string map

Key Pattern: .*\S.*

Value Pattern: .*\S.*

Required: No

VerificationState

The rule action updates the VerificationState field of a finding.

Type: String

Valid Values: UNKNOWN | TRUE_POSITIVE | FALSE_POSITIVE | BENIGN_POSITIVE

Required: No

Workflow

Used to update information about the investigation into the finding.

Type: WorkflowUpdate object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: