aws-samples / aws-samples/aws-securityhub-to-slack
Prevent sending duplicated Securityhub findings to Slack
Open
- Dominant language
- No language data
- Stars
- 60
- Forks
- 32
- PR merge metrics
- No merged PRs in 30d
Description
I am sending SecurityHub New findings to an Slack channel, however the problem is that it is sending the same findings over and over again and it would be very noisy in the channel.
I have tried a way that is mentioned in another post, setting the finding as "Notified" after it is send the New finding to Slack, however next day I saw that the same findings have been send to Slack again.
After checking on AWS doc, it seems AWS changes the Notified workflow-status to New:
https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_Workflow.html
Has anyone found a way to prevent sending duplicate findings?
Contributor guide
Assessment
This issue has not been assessed yet.