[アップデート] AWS Chatbotを使ったSecurity Hubの検知通知に検知を抑制するボタンが自動設定されるようになりました

import * as cdk from "aws-cdk-lib";
import { Construct } from "constructs";

export class SecurityHubNotificationStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const topic = new cdk.aws_sns.Topic(this, "Topic");

    const slackChannel = new cdk.aws_chatbot.SlackChannelConfiguration(
      this,
      "SlackChannel",
      {
        slackChannelConfigurationName: "times-non-97",
        slackWorkspaceId: "<SlackワークスペースID>",
        slackChannelId: "<SlackチャンネルID>",
        guardrailPolicies: [
          cdk.aws_iam.ManagedPolicy.fromAwsManagedPolicyName(
            "AWSSecurityHubFullAccess"
          ),
        ],
      }
    );

    slackChannel.addNotificationTopic(topic);

    new cdk.aws_events.Rule(this, "Rule", {
      eventPattern: {
        source: ["aws.securityhub"],
        detailType: ["Security Hub Findings - Imported"],
        detail: {
          findings: {
            ProductFields: {
              StandardsArn: [
                "arn:aws:securityhub:::standards/aws-foundational-security-best-practices/v/1.0.0",
              ],
            },
            Compliance: {
              Status: [
                {
                  "anything-but": "PASSED",
                },
              ],
            },
            Severity: {
              Label: ["CRITICAL", "HIGH", "MEDIUM"],
            },
            Workflow: {
              Status: ["NEW"],
            },
            RecordState: ["ACTIVE"],
          },
        },
      },
      targets: [new cdk.aws_events_targets.SnsTopic(topic)],
    });
  }
}

import * as cdk from "aws-cdk-lib";
import { Construct } from "constructs";

export class SecurityHubNotificationStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const topic = new cdk.aws_sns.Topic(this, "Topic");

    const slackChannel = new cdk.aws_chatbot.SlackChannelConfiguration(
      this,
      "SlackChannel",
      {
        slackChannelConfigurationName: "times-non-97",
        slackWorkspaceId: "<SlackワークスペースID>",
        slackChannelId: "<SlackチャンネルID>",
        guardrailPolicies: [
          cdk.aws_iam.ManagedPolicy.fromAwsManagedPolicyName(
            "AWSSecurityHubFullAccess"
          ),
        ],
      }
    );

    slackChannel.addToRolePolicy(
      new cdk.aws_iam.PolicyStatement({
        effect: cdk.aws_iam.Effect.ALLOW,
        actions: ["securityhub:BatchUpdateFindings"],
        resources: ["*"],
      })
    );
.
.
(中略)
.
.
}