Sending findings to a custom action - Amazon Security Hub
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Sending findings to a custom action

You can create Amazon Security Hub custom actions to automate Security Hub with Amazon EventBridge. For custom actions, the event type is Security Hub Findings - Custom Action.

For more information and detailed steps on creating custom actions, see Automated response and remediation.

After you set up a custom action, you can send findings to it.

To send findings to a custom action (console)

  1. Open the Amazon Security Hub console at https://console.amazonaws.cn/securityhub/.

  2. To display a finding list, do one of the following:

    • In the Security Hub navigation pane, choose Findings.

    • In the Security Hub navigation pane, choose Insights. Choose an insight. Then on the results list, choose an insight result.

    • In the Security Hub navigation pane, choose Integrations. Choose See findings for an integration.

    • In the Security Hub navigation pane, choose Security standards. Choose View results to display a list of controls. Then choose the control name.

  3. In the finding list, select the check box for each finding to send to the custom action.

    You can send up to 20 findings at a time.

  4. For Actions, choose the custom action.