product Arn
The ARN of the product that generates findings that you want to import into Security Hub - see below. Amazon maintains a list of Product integrations in AWS Security Hub that changes over time. Any of the products on the linked Available AWS service integrations or Available third-party partner product integrations can be configured using aws.securityhub.ProductSubscription
. Available products can also be listed by running the AWS CLI command aws securityhub describe-products
. A subset of currently available products (remember to replace ${var.region}
as appropriate) includes:
arn:aws:securityhub:${var.region}::product/aws/guardduty
arn:aws:securityhub:${var.region}::product/aws/inspector
arn:aws:securityhub:${var.region}::product/aws/macie
arn:aws:securityhub:${var.region}::product/alertlogic/althreatmanagement
arn:aws:securityhub:${var.region}::product/armordefense/armoranywhere
arn:aws:securityhub:${var.region}::product/barracuda/cloudsecurityguardian
arn:aws:securityhub:${var.region}::product/checkpoint/cloudguard-iaas
arn:aws:securityhub:${var.region}::product/checkpoint/dome9-arc
arn:aws:securityhub:${var.region}::product/crowdstrike/crowdstrike-falcon
arn:aws:securityhub:${var.region}::product/cyberark/cyberark-pta
arn:aws:securityhub:${var.region}::product/f5networks/f5-advanced-waf
arn:aws:securityhub:${var.region}::product/fortinet/fortigate
arn:aws:securityhub:${var.region}::product/guardicore/aws-infection-monkey
arn:aws:securityhub:${var.region}::product/guardicore/guardicore
arn:aws:securityhub:${var.region}::product/ibm/qradar-siem
arn:aws:securityhub:${var.region}::product/imperva/imperva-attack-analytics
arn:aws:securityhub:${var.region}::product/mcafee-skyhigh/mcafee-mvision-cloud-aws
arn:aws:securityhub:${var.region}::product/paloaltonetworks/redlock
arn:aws:securityhub:${var.region}::product/paloaltonetworks/vm-series
arn:aws:securityhub:${var.region}::product/qualys/qualys-pc
arn:aws:securityhub:${var.region}::product/qualys/qualys-vm
arn:aws:securityhub:${var.region}::product/rapid7/insightvm
arn:aws:securityhub:${var.region}::product/sophos/sophos-server-protection
arn:aws:securityhub:${var.region}::product/splunk/splunk-enterprise
arn:aws:securityhub:${var.region}::product/splunk/splunk-phantom
arn:aws:securityhub:${var.region}::product/sumologicinc/sumologic-mda
arn:aws:securityhub:${var.region}::product/symantec-corp/symantec-cwp
arn:aws:securityhub:${var.region}::product/tenable/tenable-io
arn:aws:securityhub:${var.region}::product/trend-micro/deep-security
arn:aws:securityhub:${var.region}::product/turbot/turbot
arn:aws:securityhub:${var.region}::product/twistlock/twistlock-enterprise