Skip to content

Commit 9495281

Browse files
authored
Add aws_securityhub.finding source indices to kibana_system role permissions (#137866)
Adding logs-aws_securityhub.finding-* data stream indices to the kibana_system privileges. This is required for the latest transform to work. Related: elastic/integrations#15932
1 parent f10b9ff commit 9495281

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -522,6 +522,7 @@ static RoleDescriptor kibanaSystem(String name) {
522522
"logs-google_scc.finding-*",
523523
"logs-aws.securityhub_findings-*",
524524
"logs-aws.securityhub_findings_full_posture-*",
525+
"logs-aws_securityhub.finding-*",
525526
"logs-aws.inspector-*",
526527
"logs-aws.config-*",
527528
"logs-amazon_security_lake.findings-*",

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1734,6 +1734,7 @@ public void testKibanaSystemRole() {
17341734
"logs-google_scc.finding-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17351735
"logs-aws.securityhub_findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17361736
"logs-aws.securityhub_findings_full_posture-" + randomAlphaOfLength(randomIntBetween(0, 13)),
1737+
"logs-aws_securityhub.finding-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17371738
"logs-aws.inspector-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17381739
"logs-aws.config-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17391740
"logs-amazon_security_lake.findings-" + randomAlphaOfLength(randomIntBetween(0, 13)),

0 commit comments

Comments
 (0)