aws securityhub create-finding-aggregator

The aggregation Region is now called the home Region. AWS CLI reference

1 example 2 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To enable finding aggregation

The following create-finding-aggregator example configures finding aggregation. It is run from US East (Virginia), which designates US East (Virginia) as the aggregation Region. It indicates to only link specified Regions, and to not automatically link new Regions. It selects US West (N. California) and US West (Oregon) as the linked Regions.

aws securityhub create-finding-aggregator --region us-east-1 --region-linking-mode SPECIFIED_REGIONS --regions us-west-1,us-west-2

Identify

--regionThe region to use.

--region-linking-modeIndicates whether to aggregate findings from all of the available Regions in the current partition.

--regionsIf RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that don't replicate and send findings to the home Region.

Its output

{
    "FindingAggregatorArn": "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
    "FindingAggregationRegion": "us-east-1",
    "RegionLinkingMode": "SPECIFIED_REGIONS",
    "Regions": [
        "us-west-1",
        "us-west-2"
    ]
}

For more information, see Enabling finding aggregation in the AWS Security Hub User Guide.

Options

2 in the AWS CLI reference

--region-linking-modeIndicates whether to aggregate findings from all of the available Regions in the current partition.

--regionsIf RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that don't replicate and send findings to the home Region.