From 8ee37440273d2c7baad4f554f2e72dc73983d55e Mon Sep 17 00:00:00 2001 From: Pepe Fagoaga Date: Thu, 27 Jul 2023 13:39:12 +0200 Subject: [PATCH] chore(security-hub): Explain Unique ID (#2631) --- prowler/lib/outputs/json.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/prowler/lib/outputs/json.py b/prowler/lib/outputs/json.py index 0280bb42..7cdd917e 100644 --- a/prowler/lib/outputs/json.py +++ b/prowler/lib/outputs/json.py @@ -40,6 +40,8 @@ def fill_json_asff(finding_output, audit_info, finding, output_options): if finding.resource_id == "": finding.resource_id = "NONE_PROVIDED" finding.resource_arn = finding.resource_id + # The following line cannot be changed because it is the format we use to generate unique findings for AWS Security Hub + # If changed some findings could be lost because the unique identifier will be different finding_output.Id = f"prowler-{finding.check_metadata.CheckID}-{audit_info.audited_account}-{finding.region}-{hash_sha512(finding.resource_id)}" finding_output.ProductArn = f"arn:{audit_info.audited_partition}:securityhub:{finding.region}::product/prowler/prowler" finding_output.ProductFields = ProductFields(