US75367 - filter out everything except GD Finding cwe detail type

alertlogic · Feb 28, 2018 · cae78a3 · cae78a3
1 parent 60a58ec
commit cae78a3
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/cfn/guardduty.template b/cfn/guardduty.template
@@ -937,11 +937,11 @@
          "Properties":{
             "Description":"CloudWatch events rule for Guard Duty events",
             "EventPattern":{
+                "detail-type":[
+                  "GuardDuty Finding"
+               ],
                "source":[
                   "aws.guardduty"
-               ],
-               "detail-type":[
-                  "GuardDuty Finding"
                ]
             },
             "ScheduleExpression":"",
@@ -1137,7 +1137,7 @@
                                    ]
                                 },
                                 "\", \"CloudWatchEventsRule\": \"", { "Ref": "CloudWatchEventsRule" },
-                                "\", \"CweRulePattern\": \"{\\\"source\\\":[\\\"aws.guardduty\\\"], \\\"detail-type\\\":[\\\"GuardDuty Finding\\\"]}\"",
+                                "\", \"CweRulePattern\": \"{\\\"detail-type\\\":[\\\"GuardDuty Finding\\\"],\\\"source\\\":[\\\"aws.guardduty\\\"]}\"",
                                 "}"
                             ]
                         ]