{"id":19561398,"url":"https://github.com/m-mizutani/aws-securityhub-exporter","last_synced_at":"2025-04-27T00:31:14.241Z","repository":{"id":142409075,"uuid":"198654307","full_name":"m-mizutani/aws-securityhub-exporter","owner":"m-mizutani","description":"CloudFormation stack to export findings of AWS Security Hub to S3 Bucket","archived":false,"fork":false,"pushed_at":"2024-04-19T09:37:13.000Z","size":12,"stargazers_count":4,"open_issues_count":1,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-26T07:08:32.757Z","etag":null,"topics":["aws","cloudformation-stacks","golang","lambda","securityhub"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/m-mizutani.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-07-24T14:41:52.000Z","updated_at":"2021-03-02T06:41:14.000Z","dependencies_parsed_at":"2024-06-19T08:59:12.726Z","dependency_job_id":"deaa121b-258a-49eb-9120-2cfcdb41736a","html_url":"https://github.com/m-mizutani/aws-securityhub-exporter","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m-mizutani%2Faws-securityhub-exporter","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m-mizutani%2Faws-securityhub-exporter/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m-mizutani%2Faws-securityhub-exporter/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/m-mizutani%2Faws-securityhub-exporter/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/m-mizutani","download_url":"https://codeload.github.com/m-mizutani/aws-securityhub-exporter/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251072279,"owners_count":21532004,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","cloudformation-stacks","golang","lambda","securityhub"],"created_at":"2024-11-11T05:11:19.879Z","updated_at":"2025-04-27T00:31:13.989Z","avatar_url":"https://github.com/m-mizutani.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# aws-securityhub-exporter\n\n`aws-securityhub-exporter` exports [findings](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings.html) of AWS Security Hub to S3 bucket as objects. In this moment (2019.7), AWS does not provide feature to export or push created findings to other AWS services and security products. Then Security Hub can not be integrated with security alert management service and product, such as SIEM (Security Information \u0026 Event Manager). `aws-securityhub-exporter` provides source code and template of AWS CloudFormation to build Lambda function to export findings to S3 bucket. The Lambda function is invoked periodically every 1 minute and fetches fidings in last 10 minutes (default). After that, Lambda put them to S3 bucket idempotently. Then You can integrate your security service/product with S3 event notification feature.\n\n## Prerequisite\n\n- go \u003e= 1.12\n- aws-cli \u003e= 1.16.190\n- GNU make \u003e= 3.81\n- jq \u003e= 1.6\n- jsonnet \u003e= 0.13.0\n\n## Deploy\n\n### Clone repository\n\n```bash\n$ git clone https://github.com/m-mizutani/aws-securityhub-exporter.git\n```\n\nNOTE: You do not need to change directory into the repository.\n\n### Create config files\n\n2 jsonnet files, `deploy.jsonnet` and `stack.jsonnet` are required.\n\n`deploy.jsonnet` : Configurations for deploy CloudFormation.\n```jsonnet\n{\n    StackName: 'your-stack-name',\n    // This bucket will be put materials (zipped code) of the stack\n    CodeS3Bucket: 'your-bucket-to-save-code',\n    // Materials are put under the prefix\n    CodeS3Prefix: \"materials\",\n    Region: 'ap-northeast-1',\n}\n```\n\n`stack.jsonnet` : Configurations for CloudFomation stack.\n```jsonnet\nlocal template = import 'template.libsonnet';\n\ntemplate.build(\n    // Required\n    S3Bucket='your-s3-bucket',\n    // Optional\n    S3Prefix='your-prefix/',\n    // Optional, IAM Role for Lambda is created automatically if you do not set the item\n    LambdaRoleArn='arn:aws:iam::1234567890:role/YourLambdaRole'\n)\n```\n\n### Run deploy procedure\n\n```bash\n$ ls\naws-securityhub-exporter\ndeploy.jsonnet\nstack.jsonnet\n$ make deploy -f aws-securityhub-exporter/Makefile\n```\n\n## License\n\n- [The 3-Clause BSD License](https://opensource.org/licenses/BSD-3-Clause)\n- Author: Masayoshi Mizutani \u003cmizutani@sfc.wide.ad.jp\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fm-mizutani%2Faws-securityhub-exporter","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fm-mizutani%2Faws-securityhub-exporter","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fm-mizutani%2Faws-securityhub-exporter/lists"}