aws-cloudformation / aws-cloudformation/cloudformation-coverage-roadmap
[AWS::SecurityHub::AutomationRule] - [Enhancement] - Criteria Property AutomationRulesFindingFilters Support for AwsAccountName
- Dominant language
- No language data
- Stars
- 1.1k
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
### Name of the resource
AWS::SecurityHub::AutomationRule
### Resource name
_No response_
### Description
Hi,
The `AWS::SecurityHub::AutomationRule` CloudFormation resource `Criteria` property `AutomationRulesFindingFilters` [1] doesn't currently support `AwsAccountName`.
This is supported by Security Hub [2].
Please review and address this coverage item - thanks.
---
[1 - AWS::SecurityHub::AutomationRule AutomationRulesFindingFilters](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html)
```
{
"AwsAccountId" : [ StringFilter, ... ],
"CompanyName" : [ StringFilter, ... ],
"ComplianceAssociatedStandardsId" : [ StringFilter, ... ],
"ComplianceSecurityControlId" : [ StringFilter, ... ],
"ComplianceStatus" : [ StringFilter, ... ],
"Confidence" : [ NumberFilter, ... ],
"CreatedAt" : [ DateFilter, ... ],
"Criticality" : [ NumberFilter, ... ],
"Description" : [ StringFilter, ... ],
"FirstObservedAt" : [ DateFilter, ... ],
"GeneratorId" : [ StringFilter, ... ],
"Id" : [ StringFilter, ... ],
"LastObservedAt" : [ DateFilter, ... ],
"NoteText" : [ StringFilter, ... ],
"NoteUpdatedAt" : [ DateFilter, ... ],
"NoteUpdatedBy" : [ StringFilter, ... ],
"ProductArn" : [ StringFilter, ... ],
"ProductName" : [ StringFilter, ... ],
"RecordState" : [ StringFilter, ... ],
"RelatedFindingsId" : [ StringFilter, ... ],
"RelatedFindingsProductArn" : [ StringFilter, ... ],
"ResourceDetailsOther" : [ MapFilter, ... ],
"ResourceId" : [ StringFilter, ... ],
"ResourcePartition" : [ StringFilter, ... ],
"ResourceRegion" : [ StringFilter, ... ],
"ResourceTags" : [ MapFilter, ... ],
"ResourceType" : [ StringFilter, ... ],
"SeverityLabel" : [ StringFilter, ... ],
"SourceUrl" : [ StringFilter, ... ],
"Title" : [ StringFilter, ... ],
"Type" : [ StringFilter, ... ],
"UpdatedAt" : [ DateFilter, ... ],
"UserDefinedFields" : [ MapFilter, ... ],
"VerificationState" : [ StringFilter, ... ],
"WorkflowStatus" : [ StringFilter, ... ]
}
```
*Note from above `AwsAccountName` is missing.
[2 - Understanding automation rules in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html)
```
Rule criterion: AwsAccountName
Filter operators: CONTAINS, EQUALS, PREFIX, NOT_CONTAINS, NOT_EQUALS, PREFIX_NOT_EQUALS
Field type: String
```
### Other Details
_No response_
Contributor guide
Research direction
Start with the AWS::SecurityHub::AutomationRule resource and its Criteria.AutomationRulesFindingFilters property, then compare the linked CloudFormation and Security Hub references. Done means AwsAccountName is accepted for this property with the listed string-filter operators and the resource coverage reflects the addition.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100