本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AwsCloudWatch
下面是示例如下Amazon的安全查找格式AwsCloudWatch资源。
AwsCloudWatchAlarm
这些区域有:AwsCloudWatchAlarm对象提供有关亚马逊的详细信息 CloudWatch 用于监视指标或在警报更改状态时执行操作的警报。
以下示例显示获取的结果显示提的结果显示AmazonSecurity Finding 格式 (ASFF)AwsCloudWatchAlarmobject 查看以下内容的描述AwsCloudWatchAlarm属性,请参阅AwsCloudWatchAlarmDetails在Amazon Security HubAPI 参考.
示例
"AwsCloudWatchAlarm": { "ActonsEnabled": true, "AlarmActions": [ "arn:aws:automate:region:ec2:stop", "arn:aws:automate:region:ec2:terminate" ], "AlarmArn": "arn:aws:cloudwatch:us-west-2:012345678910:alarm:sampleAlarm", "AlarmConfigurationUpdatedTimestamp": "2022-02-18T15:31:53.161Z", "AlarmDescription": "Alarm Example", "AlarmName": "Example", "ComparisonOperator": "GreaterThanOrEqualToThreshold", "DatapointsToAlarm": 1, "Dimensions": [{ "Name": "InstanceId", "Value": "i-1234567890abcdef0" }], "EvaluateLowSampleCountPercentile": "evaluate", "EvaluationPeriods": 1, "ExtendedStatistic": "p99.9", "InsufficientDataActions": [ "arn:aws:automate:region:ec2:stop" ], "MetricName": "Sample Metric", "Namespace": "YourNamespace", "OkActions": [ "arn:aws:swf:region:account-id:action/actions/AWS_EC2.InstanceId.Stop/1.0" ], "Period": 1, "Statistic": "SampleCount", "Threshold": 12.3, "ThresholdMetricId": "t1", "TreatMissingData": "notBreaching", "Unit": "Kilobytes/Second" }