AWS::SecurityHub::AutomationRuleV2 OcsfNumberFilter - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::SecurityHub::AutomationRuleV2 OcsfNumberFilter

Enables filtering of security findings based on numerical field values in OCSF.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "FieldName" : String,
  "Filter" : NumberFilter
}

Properties

FieldName

The name of the field.

Required: Yes

Type: String

Allowed values: activity_id | compliance.status_id | confidence_score | finding_info.related_events_count | vendor_attributes.severity_id

Update requires: No interruption

Filter

Enables filtering of security findings based on numerical field values in OCSF.

Required: Yes

Type: NumberFilter

Update requires: No interruption