recommended_policy_v2s

Creates, updates, deletes, gets or lists a recommended_policy_v2s resource.

Overview

Name	recommended_policy_v2s
Type	Resource
Id	aws.securityhub.recommended_policy_v2s

Fields

The following fields are returned by SELECT queries:

get_recommended_policy_v2

Name	Datatype	Description
unused_permissions	object	A recommended step to remediate an unused permissions finding.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_recommended_policy_v2	select	metadata_uid, region	NextToken, MaxResults	Retrieves the recommended policy to remediate a Security Hub finding. GetRecommendedPolicyV2 only supports findings for unused permissions.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
metadata_uid	string	The unique identifier (ID) of Security Hub OCSF findings found under the metadata.uid field of the finding.
region	string	AWS region (default: us-east-1)
MaxResults	integer	The maximum number of recommendation steps to return.
NextToken	string	The token used to paginate the RecommendationSteps list returned. On your first call to GetRecommendedPolicyV2, omit this parameter or set it to NULL. For subsequent calls, use the NextToken value returned in the previous response to retrieve the next page of results.

SELECT examples

get_recommended_policy_v2

Retrieves the recommended policy to remediate a Security Hub finding. GetRecommendedPolicyV2 only supports findings for unused permissions.

SELECT
unused_permissions
FROM aws.securityhub.recommended_policy_v2s
WHERE metadata_uid = '{{ metadata_uid }}' -- required
AND region = '{{ region }}' -- required
AND NextToken = '{{ NextToken }}'
AND MaxResults = '{{ MaxResults }}'
;