[aws_securityhub] Initial release of AWS Security Hub

[brijesh-elastic]

Proposed commit message

aws_securityhub: Initial release of AWS Security Hub

the integration collects findings in OCSF format using GetFindingsV2 API, it supports
OCSF v1.5 classes(2002, 2003, 2004, 2006).

ECS mapping and transforms have also been added to facilitate with the
Cloud Native Vulnerability Management (CNVM)[1] workflow.

[1] https://www.elastic.co/guide/en/security/current/vuln-management-overview.html

Note

To Reviewers:

• Please refer to this guide: https://docs.elastic.dev/security-solution/cloud-security/cdr/3p-dev-guide which was used for proposed changes.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/aws_securityhub directory.
• Run the following command to run tests.

elastic-package test

Related issues

• Closes https://github.com/elastic/security-team/issues/12590
• Closes AWS Security Hub: Implement mappings for Cloud Security Vulnerability Workflows #15425
• Closes AWS Security Hub: Implement transform for Cloud Security Vulnerability Workflows #15426

[elasticmachine]

💔 Build Failed

• Buildkite Build
• Commit: be3cd17

Failed CI Steps

• Check integrations aws_securityhub

History

cc @brijesh-elastic