AWS Security Hub Module #159
Conversation
| detail-type: | ||
| - "Security Hub Findings - Imported" | ||
| source: | ||
| - "aws.securityhub" |
There was a problem hiding this comment.
does this means that the data collection account should be a delegated admin for SH?
There was a problem hiding this comment.
It can or cannot. Account where Data collection is enabled along with SH. It can also be a delegated admin account where Data collection is running as well. Idea is, that the customer should enable at the main account and then can enable QuickSight access to other admins
There was a problem hiding this comment.
Can you add a comment about this to Readme? That Data Collection account must be an Admin or Delegated admin of SH?
| Key: !Ref StepFunctionTemplate | ||
| DefinitionSubstitutions: | ||
| AccountCollectorLambdaARN: !Ref AccountCollectorLambdaARN | ||
| ModuleLambdaARN: !GetAtt LambdaFunction.Arn |
There was a problem hiding this comment.
Do we need StepFunction here?
There was a problem hiding this comment.
Removed StepFunction reference
| Type: AWS::Lambda::Function | ||
| Properties: | ||
| FunctionName: !Sub '${ResourcePrefix}${CFDataName}-Lambda' | ||
| Description: !Sub "Lambda function to retrieve ${CFDataName}" |
There was a problem hiding this comment.
Is it to retrieve or to transform?
|
closing in favor of #161 |
Issue #, if available:
Description of changes: added AWS Security Hub Module
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.