Skip to content
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions SecurityHubFindingsToSlack.json
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@
"Name" : "SecurityHubFindingsToSlack",
"Description": "CloudWatchEvents Rule to enable SecurityHub Findings in Slack ",
"State": "ENABLED",
"EventPattern" : {
"EventPattern" : {
"source": ["aws.securityhub"],
"resources": [{ "Fn::Join" : [ ":", [ "arn", "aws", "securityhub", { "Ref" : "AWS::Region" }, { "Ref" : "AWS::AccountId" }, { "Fn::Join" : [ "/", [ "action", "custom", "SendToSlack"] ] }]
]}]},
Expand Down Expand Up @@ -141,7 +141,7 @@
"const consoleUrl = `https://console.aws.amazon.com/securityhub`;\n",
"const finding = message.detail.findings[0].Types[0];\n",
"const findingDescription = message.detail.findings[0].Description;\n",
"const findingTime = message.detail.findings[0].updatedAt;\n",
"const findingTime = message.detail.findings[0].UpdatedAt;\n",
"const findingTimeEpoch = Math.floor(new Date(findingTime) / 1000);\n",
"const account = message.detail.findings[0].AwsAccountId;\n",
"const region = message.detail.findings[0].Resources[0].Region;\n",
Expand All @@ -159,7 +159,7 @@
"\n",
"const attachment = [{\n",
"\"fallback\": finding + ` - ${consoleUrl}/home?region=` + `${region}#/findings?search=id%3D${messageId}`,\n",
"\"pretext\": `*AWS SecurityHub finding in ${region} for Acct: ${account}*`,\n",
"\"pretext\": `*AWS Security Hub finding for account: ${account}*`,\n",
"\"title\": `${finding}`,\n",
"\"title_link\": `${consoleUrl}/home?region=${region}#/research`,\n",
"\n",
Expand Down