aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap

[AWS::SecurityHub::AutomationRule] - [Enhancement] - Criteria Property AutomationRulesFindingFilters Support for AwsAccountName

Open
#2,334 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
No language data
Stars
1.1k
Forks
62
PR merge metrics
No merged PRs in 30d

Description

### Name of the resource

AWS::SecurityHub::AutomationRule

### Resource name

_No response_

### Description

Hi,

The `AWS::SecurityHub::AutomationRule` CloudFormation resource `Criteria` property `AutomationRulesFindingFilters` [1] doesn't currently support `AwsAccountName`.

This is supported by Security Hub [2].

Please review and address this coverage item - thanks.

---

[1 - AWS::SecurityHub::AutomationRule AutomationRulesFindingFilters](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html)

```
{
"AwsAccountId" : [ StringFilter, ... ],
"CompanyName" : [ StringFilter, ... ],
"ComplianceAssociatedStandardsId" : [ StringFilter, ... ],
"ComplianceSecurityControlId" : [ StringFilter, ... ],
"ComplianceStatus" : [ StringFilter, ... ],
"Confidence" : [ NumberFilter, ... ],
"CreatedAt" : [ DateFilter, ... ],
"Criticality" : [ NumberFilter, ... ],
"Description" : [ StringFilter, ... ],
"FirstObservedAt" : [ DateFilter, ... ],
"GeneratorId" : [ StringFilter, ... ],
"Id" : [ StringFilter, ... ],
"LastObservedAt" : [ DateFilter, ... ],
"NoteText" : [ StringFilter, ... ],
"NoteUpdatedAt" : [ DateFilter, ... ],
"NoteUpdatedBy" : [ StringFilter, ... ],
"ProductArn" : [ StringFilter, ... ],
"ProductName" : [ StringFilter, ... ],
"RecordState" : [ StringFilter, ... ],
"RelatedFindingsId" : [ StringFilter, ... ],
"RelatedFindingsProductArn" : [ StringFilter, ... ],
"ResourceDetailsOther" : [ MapFilter, ... ],
"ResourceId" : [ StringFilter, ... ],
"ResourcePartition" : [ StringFilter, ... ],
"ResourceRegion" : [ StringFilter, ... ],
"ResourceTags" : [ MapFilter, ... ],
"ResourceType" : [ StringFilter, ... ],
"SeverityLabel" : [ StringFilter, ... ],
"SourceUrl" : [ StringFilter, ... ],
"Title" : [ StringFilter, ... ],
"Type" : [ StringFilter, ... ],
"UpdatedAt" : [ DateFilter, ... ],
"UserDefinedFields" : [ MapFilter, ... ],
"VerificationState" : [ StringFilter, ... ],
"WorkflowStatus" : [ StringFilter, ... ]
}
```
*Note from above `AwsAccountName` is missing.

[2 - Understanding automation rules in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html)

```
Rule criterion: AwsAccountName
Filter operators: CONTAINS, EQUALS, PREFIX, NOT_CONTAINS, NOT_EQUALS, PREFIX_NOT_EQUALS
Field type: String
```

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with the AWS::SecurityHub::AutomationRule resource and its Criteria.AutomationRulesFindingFilters property, then compare the linked CloudFormation and Security Hub references. Done means AwsAccountName is accepted for this property with the listed string-filter operators and the resource coverage reflects the addition.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.