fix: update cli args for prowler

stekern · Sep 21, 2024 · 19d40e2 · 19d40e2
1 parent a70052d
commit 19d40e2
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/sfn-prowler-task.ts b/src/sfn-prowler-task.ts
@@ -71,8 +71,11 @@ export class SfnProwlerTask extends constructs.Construct {
         "json-asff",
         "--region",
         region,
-        "--security-hub", // send to security hub
-        "--quiet", // only send failed checks
+        // Enable security hub
+        "--security-hub",
+        // Only send failed checks
+        "--status",
+        "FAIL",
       ],
     })
     taskDefinition.taskRole.addManagedPolicy(