elastic / cloudbeat / 32377426614
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 243
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 76.215% (-0.02%) from 76.238%
32377426614

push

github

web-flow 
[CFT] Add ElasticAwsSecurityHub policy to federated-identity-aws template (#8030)

## Summary

Adds the `ElasticAwsSecurityHub` IAM policy resource to
`deploy/cloudformation/federated-identity-aws.yml`, granting the
permissions required by the `aws_securityhub` and `aws` package
SecurityHub data streams for Federated Identity (Cloud Connectors)
deployments.


The remaining packages in elastic/ingest-dev#8812 (`aws_bedrock`,
`aws_bedrock_agentcore`, `aws_mq`, `aws_logs`) require no new policy
blocks — their streams read exclusively from CloudWatch metrics and
CloudWatch Logs, which are already covered by the existing
`ElasticAwsMetrics` and `ElasticAwsCloudwatchLogs` policies.

### Permissions added

| Action | Authorizes |
|---|---|
| `securityhub:GetFindings` | `POST /findings`
(aws/securityhub_findings, aws/securityhub_findings_full_posture) and
`POST /findingsv2` (aws_securityhub/finding) — both operations use this
IAM action |
| `securityhub:GetInsights` | `POST /insights/get`
(aws/securityhub_insights) |

### Related

- elastic/integrations#20529 — Enable Identity Federation for `aws`
package SecurityHub streams and standalone `aws_securityhub` package
- elastic/ingest-dev#8812 — per-package federation rollout tracking
- elastic/ingest-dev#9116 — `external_id` / ExternalId removed from
federation trust policy

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

10161 of 13332 relevant lines covered (76.22%)

15.99 hits per line

Coverage Regressions

Lines Coverage ∆ File
5
83.06
-0.98% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 32377426614.1 243
76.22
GitHub Action Run
Source Files on build 32377426614