Skip to main content
Retrieve a list of insights for the specified insight ARNs. Note: If no insight ARNs are provided, the action returns all custom insights. Managed insights are not included.
External DocumentationTo learn more, visit the AWS documentation.

​
Basic Parameters

ParameterDescription
AWS RegionsA comma-separated list of AWS regions where this action will be executed.

For example, to execute in US East and Europe, enter us-east-1,eu-west-1.

Alternatively, you can use the asterisk symbol * to run the action in all available AWS Regions.
Insight ARNsA comma-separated list of insight ARNs to get details for.
Max ResultsThe maximum number of results to return per page. Valid values range from 1 to 100.
Next TokenA pagination token for retrieving subsequent pages of results. Can be obtained from the NextToken field in the previous response.

Note: This parameter can only be used when a single region is specified.

​
Advanced Parameters

ParameterDescription
Disable XML To JSON Auto ConvertWhen checked, XML responses are not automatically converted into JSON format.

​
Example Output

{
	"Insights": [
		{
			"Filters": {
				"SeverityLabel": [
					{
						"Comparison": "EQUALS",
						"Value": "CRITICAL"
					}
				]
			},
			"GroupByAttribute": "ResourceId",
			"InsightArn": "arn:aws:securityhub:us-east-1:123456789012:insight/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
			"Name": "Critical findings by resource"
		}
	],
	"NextToken": "string"
}

​
Workflow Library Example

Security Hub Get Insights with Aws and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop