aws_securityhub_get_findings
Retrieve AWS Security Hub findings from multiple security services like GuardDuty and Inspector. Filter and sort security alerts to identify vulnerabilities and compliance issues in your AWS environment.
Instructions
Retrieve Security Hub findings with optional filters. Aggregates findings from GuardDuty, Inspector, Macie, IAM Access Analyzer, and more.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | AWS profile name from ~/.aws/config (e.g., 'default', 'production') | |
| region | No | AWS region override (e.g., 'us-east-1', 'sa-east-1') | |
| filters | No | ASFF filter object. Example: {"SeverityLabel": [{"Value": "HIGH", "Comparison": "EQUALS"}], "RecordState": [{"Value": "ACTIVE", "Comparison": "EQUALS"}]} | |
| sort_criteria | No | Sort results (e.g., [{"Field": "LastObservedAt", "SortOrder": "desc"}]) | |
| max_results | No | Maximum findings to return (default: 50, max: 100) |