pepabo / control-controls

control-controls control controls of AWS Security Hub across all regions.
MIT License
10 stars 3 forks source link

Do control-controls support "Consolidated control findings"? #34

Closed htnosm closed 1 year ago

htnosm commented 1 year ago

Thanks for this useful software. Do control-controls support "Consolidated control findings"?

ref. Impact of consolidation on ASFF fields and values - AWS Security Hub

In an environment where Consolidated control findings are "On", ProductFields.StandardsArn is removed and replaced with Compliance.AssociatedStandards. This is probably why standards.<standard>.findings.<control_id>.<target_arn>.status and note doesn't work. e.g. https://github.com/pepabo/control-controls/blob/main/sechub/plan.go#L168

k1LoW commented 1 year ago

@htnosm Thank you for your contribution!

control-controls does not support Consolidated control findings. Also, I do not have any knowledge about it yet. Sorry, please wait for a while.