in common/aws.go [39:66]
func ReturnFindings(ctx context.Context, securityHubClient *securityhub.Client, controlId string, maxResults int32) (*securityhub.GetFindingsOutput, error) {
complianceStatus := "PASSED"
recordState := "ACTIVE"
fmt.Printf("Retrieving Security Hub control failures for %s\n", controlId)
findings, err := securityHubClient.GetFindings(ctx, &securityhub.GetFindingsInput{
MaxResults: &maxResults,
Filters: &shTypes.AwsSecurityFindingFilters{
ComplianceSecurityControlId: []shTypes.StringFilter{{
Value: &controlId,
Comparison: shTypes.StringFilterComparisonEquals,
}},
ComplianceStatus: []shTypes.StringFilter{{
Value: &complianceStatus,
Comparison: shTypes.StringFilterComparisonNotEquals,
}},
RecordState: []shTypes.StringFilter{{
Value: &recordState,
Comparison: shTypes.StringFilterComparisonEquals,
}},
},
})
if err != nil {
return nil, err
}
return findings, nil
}