AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::SecurityHub::Insight

CfnInsight

The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *AWS Security Hub CSPM User Guide* . Tags aren't supported for this resource.

Import

import { CfnInsight } from 'aws-cdk-lib/aws-securityhub';

Or use the module namespace:

import * as securityhub from 'aws-cdk-lib/aws-securityhub';
// securityhub.CfnInsight

Properties

Configuration passed to the constructor as CfnInsightProps.

filtersRequired
IResolvable | AwsSecurityFindingFiltersProperty

One or more attributes used to filter the findings included in the insight. The insight only includes findings that match the criteria defined in the filters. You can filter by up to ten finding attributes. For each attribute, you can provide up to 20 filter values.

groupByAttributeRequired
string

The grouping attribute for the insight's findings. Indicates how to group the matching findings, and identifies the type of item that the insight applies to. For example, if an insight is grouped by resource identifier, then the insight produces a list of resource identifiers.

nameRequired
string

The name of a Security Hub CSPM insight.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter