FindingsFilter

Source: src/AWS/Macie2/FindingsFilter.ts

An Amazon Macie findings filter — matches findings against criteria and either keeps (NOOP) or auto-suppresses (ARCHIVE) them. Requires Macie to be enabled for the account (see Macie2.Session). Name, description, action, position, and criteria are all updatable in place.

Filtering findings

Suppress low-severity findings

const filter = yield* Macie2.FindingsFilter("LowSeverity", {
  action: "ARCHIVE",
  position: 1,
  findingCriteria: {
    criterion: { "severity.description": { eq: ["Low"] } },
  },
});

Keep a named filter for the console

const filter = yield* Macie2.FindingsFilter("ProdBuckets", {
  name: "prod-buckets-only",
  description: "Findings on production buckets",
  findingCriteria: {
    criterion: {
      "resourcesAffected.s3Bucket.name": { eq: ["prod-data"] },
    },
  },
});