Table: aws_securityhub_action_target - Query AWS Security Hub Action Targets using SQL

AWS Security Hub Action Targets are specific response actions that can be taken in response to findings. These actions can be custom actions, which you define for your own needs, or AWS managed actions, which are predefined by AWS. They provide a systematic way to initiate a response to specific types of findings.

Table Usage Guide

The aws_securityhub_action_target table in Steampipe provides you with information about Action Targets within AWS Security Hub. This table allows you, as a DevOps engineer, to query Action Target-specific details, including its ARN, name, and description. You can utilize this table to gather insights on Action Targets, such as understanding the purpose of each Action Target, verifying their names and descriptions, and more. The schema outlines the various attributes of the Action Target for you, including the action target ARN, name, and description.

Examples

Basic info

Determine the areas in which specific action targets in your AWS Security Hub are located. This can help you manage and prioritize security tasks based on their geographical locations.

select
  name,
  arn,
  region
from
  aws_securityhub_action_target;

select
  name,
  arn,
  region
from
  aws_securityhub_action_target;

Get details of a specific action target

This example helps you identify specific security actions within your AWS Security Hub, particularly useful when you need to understand the details of a certain action for security auditing or compliance purposes. It's a handy tool for pinpointing actions in a specific region.

select
  name,
  arn,
  region
from
  aws_securityhub_action_target
where
  arn = 'arn:aws:securityhub:ap-south-1:*****:action/custom/test';

select
  name,
  arn,
  region
from
  aws_securityhub_action_target
where
  arn = 'arn:aws:securityhub:ap-south-1:*****:action/custom/test';

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_securityhub_action_target