Reviewing details for exposure findings - Amazon Security Hub
Reviewing details for an exposure finding in the Security Hub consoleReviewing details for an exposure finding with the API
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Reviewing details for exposure findings

This topic describes how to review details about exposure findings in the Amazon Security Hub console and with the API.

Reviewing details for an exposure finding in the Security Hub console

To view details for an exposure finding in the Security Hub console

  1. Sign in using your credentials, and open the Security Hub console at https://console.aws.amazon.com/securityhub/v2/home.

  2. From the navigation pane, choose Exposures.

  3. Choose an exposure finding that you want to view details.

Reviewing details for an exposure finding with the API

You can review exposure findings with the GetFindingsV2 API or with the Amazon CLI. You can filter all exposure findings with the metadata.product.feature.uid field with the security-hub/Exposure value. For more information, see GetFindingsV2.

Example command

The following is an Amazon CLI example that retrieves the 10 most recently generated exposure findings in your account. This example is formatted for Linux, macOS, or Unix, and it uses the backslash (\) line-continuation character to improve readability. 

aws securityhub get-findings-v2 \
--max-results '10' \
--filter '{"CompositeFilters": [{"StringFilters": [{"FieldName":"metadata.product.feature.uid","Filter": {"Value":"security-hub/Exposure","Comparison":"EQUALS"}} ]}]}'