AWS CLI : Download Security hub overall summary report #7097
-
|
Hi, In AWS Console, in Security Hub it is possible to see the overall status of the Standard & as well Download the Report https://docs.aws.amazon.com/securityhub/latest/userguide/control-finding-list.html Via CLI or API I don't see such a possibility Seems, it always returns a list of individual findings and their compliance status get-findings call is the List of Findings and Compliance.Status for every Status https://docs.aws.amazon.com/securityhub/latest/userguide/controls-overall-status.html Based on some reverse engineering , they use "internalAPI.listControlEvaluationSummaries" in their FE aws beta js sdk |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments · 4 replies
-
|
Hi @advissor, thanks for reaching out. |
Beta Was this translation helpful? Give feedback.
-
|
@aBurmeseDev but that is not an "overall" controls report I need that report that is available for Download via AWS Console
|
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the clarification. I reached out to SecurityHub team regarding this request and will post an update when I hear back. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @advissor, the service team provided an update that they have an existing backlog item for this as feature request. I will post here when I hear any more updates and feel free to check back in for updates! |
Beta Was this translation helpful? Give feedback.
-
|
Don't hold your breath. To be blunt, Security Hub was flaky four yours ago and hasn't improved since. The 'backlog' never moves and that tells me the Security Hub service team has very few people in it. |
Beta Was this translation helpful? Give feedback.
-
|
@aBurmeseDev , I have the same need. This appears to have been on the backlog for 18 months. Any update? |
Beta Was this translation helpful? Give feedback.
Hi @advissor, thanks for reaching out.
For viewing “the overall status of the standard”, I’d recommend to try
describe-standards-controlsas mentioned here.Also, you could download the output to a json file from the command line using --output json. Please refer to the doc here and let me know if that helps.