AWS SecurityHub
Read get findings, list members, describe hub from SecurityHub (SigV4).
OCNORA ships 4 typed AWS SecurityHub operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run.
Before you connect AWS SecurityHub
- Authentication
- API key
- Credential
- {"access_key_id", "secret_access_key"}
- Connection test
- Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.
What you can do with AWS SecurityHub
Operations, grouped by what they do to your data.
Read and search 3
Other operations 1
A sample AWS SecurityHub workflow
- 1A core triggerStart the run from a chat, form, manual, schedule, webhook, workflow trigger — no AWS SecurityHub trigger is needed.
- 2Describe Hubsecurityhub.describe_hubReturns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub CSPM.
- 3Write Actionsecurityhub.callRun one of 63 write actions on SecurityHub.
An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.
Every node below has a reference page: what it does, the connection it needs, its config fields with types, constraints and examples, and the shapes it emits.
Operations 4
- Write ActionRun one of 63 write actions on SecurityHub.securityhub.call
- Describe HubReturns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub CSPM.securityhub.describe_hub
- Get FindingsReturns a list of findings that match the specified criteria.securityhub.get_findings
- List MembersLists details about all member accounts for the current Security Hub CSPM administrator account.securityhub.list_members
AWS SecurityHub questions
- How does OCNORA authenticate with AWS SecurityHub?
- With a stored API key credential, shaped {"access_key_id", "secret_access_key"}. A connection test can check it when you add it.
- What can I automate with AWS SecurityHub?
- 4 typed operations, each with a reference page listing its config fields and the shapes it emits.
- What if the AWS SecurityHub operation I need is not listed?
- Where AWS SecurityHub has an HTTP API, call it from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
- Are there templates that use AWS SecurityHub?
- Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
- How are AWS SecurityHub calls controlled?
- Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.
See your first AWS SecurityHub workflow run.
Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.