Comments (2)
Hello @jmello-pagseguro, thanks for creating the issue here.
To continue the conversation we had in Slack, as far as I can tell the above feature is not supported by AWS Security Hub right? At least it wasn't, so you have to send each finding to their correspondent AWS Security Hub region and then aggregate all the account’s region findings in one region to view all at once.
Regarding accounts you can delegate administrators in Security Hub to manage your organisation but I’m not sure if all the findings can be sent to single account since they are theoretically restricted by their ARN.
The AWS CLI documentation about the call batch-import-findings
states the following:
- The Amazon Web Services account that is associated with a finding if you are using the default product ARN or are a partner sending findings from within a customer's Amazon Web Services account. In these cases, the identifier of the account that you are calling BatchImportFindings from needs to be the same as the AwsAccountId attribute for the finding.
- An AWS account that Security Hub has allow-listed for an official partner integration. In this case, you can call BatchImportFindings from the allow-listed account and send findings from different customer accounts in the same batch.
Maybe your use case can fit into the second but I'm not sure how it works internally in AWS.
from prowler.
We are closing this issue since the behaviour described above is not supported by AWS Security Hub, as discussed with the issue owner in the Prowler Community Slack at https://prowler-workspace.slack.com/archives/C0451NDLC4X/p1720027104962509.
from prowler.
Related Issues (20)
- Stuck in Poetry install HOT 4
- Dashboard overview no longer has pages HOT 2
- [Bug]: Unable to filter muted findings in HTML output HOT 3
- HTML outputs no filters HOT 3
- Prowler gets stuck / fails when running Lambda check against account with LZA HOT 1
- [Bug]: with the -B option o not create the report in S3 in HTML format, HOT 2
- [Bug]: Assume Role Region is not valid for GovCloud Regions HOT 2
- [Bug]: parameter --checks is not honored anymore since v4.2.4 HOT 5
- [Bug]: False Positive on check s3_bucket_public_access when Conditions in Policy HOT 4
- [Bug]: Prowler Dashboard in Kubernetes CronJob HOT 3
- [Bug]: Subnets with No Resource misses evaluation by Prowler for VPC HOT 3
- False Positive in iam_sa_no_administrative_privileges Check HOT 3
- [Bug]: Update Security Hub documentation to remove --quiet HOT 1
- Compliance report for NIST CSF 1.1 formatting is incorrect HOT 7
- Prowler ignores mutelist HOT 4
- ValueError with TimeData in AWS during iam_avoid_root_usage , iam_rotate_access_key_90_days , iam_user_accesskey_unused checks HOT 3
- Installing Prowler on AWS CloudShell fails due to no space left on device HOT 3
- HTML Assessment Overview Not Reporting Numbers HOT 5
- Custom delimiter for CSV / SSV outputs
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from prowler.