Enhance SecurityHub Automation Rule Listing and Saving Script #66
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This change request introduces significant improvements to the script used for listing and saving AWS SecurityHub automation rules across regions. The modified script not only lists the rules but also provides an option to save these rules as JSON files. Additionally, it includes error handling improvements and utilizes a custom Boto3 configuration for adaptive retry strategies.
Changes
--save-rules-json
to enable the saving of rules as JSON files.save_rule_to_json
that takes a rule name, its data, and region to save the rule as a JSON file in the current directory.batch_get_automation_rules
method and the list of rule ARNs.--save-rules-json
flag is set.Benefits