aws-native.securityhub.AutomationRule

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AwsNative = Pulumi.AwsNative;

return await Deployment.RunAsync(() => 
{
    var ruleWithCriteriaActionsTags = new AwsNative.SecurityHub.AutomationRule("ruleWithCriteriaActionsTags", new()
    {
        RuleName = "Example rule name",
        RuleOrder = 5,
        Description = "Example rule description.",
        IsTerminal = false,
        RuleStatus = AwsNative.SecurityHub.AutomationRuleRuleStatus.Enabled,
        Criteria = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFiltersArgs
        {
            ProductName = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "GuardDuty",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "SecurityHub",
                },
            },
            CompanyName = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "AWS",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "Private",
                },
            },
            ProductArn = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "arn:aws:securityhub:us-west-2:123456789012:product/aws",
                },
            },
            AwsAccountId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "123456789012",
                },
            },
            Id = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "example-finding-id",
                },
            },
            GeneratorId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "example-generator-id",
                },
            },
            Type = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "type-1",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "type-2",
                },
            },
            Description = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "description1",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "description2",
                },
            },
            SourceUrl = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "https",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "ftp",
                },
            },
            Title = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "title-1",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "title-2",
                },
            },
            SeverityLabel = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "LOW",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "HIGH",
                },
            },
            ResourceType = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "AwsEc2Instance",
                },
            },
            ResourcePartition = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "aws",
                },
            },
            ResourceId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "i-1234567890",
                },
            },
            ResourceRegion = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "us-west",
                },
            },
            ComplianceStatus = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "FAILED",
                },
            },
            ComplianceSecurityControlId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "EC2.3",
                },
            },
            ComplianceAssociatedStandardsId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "ruleset/cis-aws-foundations-benchmark/v/1.2.0",
                },
            },
            VerificationState = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "BENIGN_POSITIVE",
                },
            },
            RecordState = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "ACTIVE",
                },
            },
            RelatedFindingsProductArn = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "arn:aws:securityhub:eu-central-1::product/aws/securityhub",
                },
            },
            RelatedFindingsId = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "example-finding-id-2",
                },
            },
            NoteText = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "example-note-text",
                },
            },
            NoteUpdatedAt = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs
                {
                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs
                    {
                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,
                        Value = 5,
                    },
                },
            },
            NoteUpdatedBy = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,
                    Value = "sechub",
                },
            },
            WorkflowStatus = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,
                    Value = "NEW",
                },
            },
            FirstObservedAt = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs
                {
                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs
                    {
                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,
                        Value = 5,
                    },
                },
            },
            LastObservedAt = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs
                {
                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs
                    {
                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,
                        Value = 5,
                    },
                },
            },
            CreatedAt = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs
                {
                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs
                    {
                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,
                        Value = 5,
                    },
                },
            },
            UpdatedAt = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs
                {
                    Start = "2023-04-25T17:05:54.832Z",
                    End = "2023-05-25T17:05:54.832Z",
                },
            },
            ResourceTags = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,
                    Key = "department",
                    Value = "security",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,
                    Key = "department",
                    Value = "operations",
                },
            },
            UserDefinedFields = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,
                    Key = "key1",
                    Value = "security",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,
                    Key = "key2",
                    Value = "operations",
                },
            },
            ResourceDetailsOther = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,
                    Key = "area",
                    Value = "na",
                },
                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs
                {
                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,
                    Key = "department",
                    Value = "sales",
                },
            },
            Confidence = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs
                {
                    Gte = 50,
                    Lte = 95,
                },
            },
            Criticality = new[]
            {
                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs
                {
                    Gte = 50,
                    Lte = 95,
                },
            },
        },
        Actions = new[]
        {
            new AwsNative.SecurityHub.Inputs.AutomationRulesActionArgs
            {
                Type = AwsNative.SecurityHub.AutomationRulesActionType.FindingFieldsUpdate,
                FindingFieldsUpdate = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFieldsUpdateArgs
                {
                    Severity = new AwsNative.SecurityHub.Inputs.AutomationRuleSeverityUpdateArgs
                    {
                        Product = 50,
                        Label = AwsNative.SecurityHub.AutomationRuleSeverityUpdateLabel.Medium,
                        Normalized = 60,
                    },
                    Types = new[]
                    {
                        "Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices",
                        "Industry Compliance",
                    },
                    Confidence = 98,
                    Criticality = 95,
                    UserDefinedFields = 
                    {
                        { "key1", "value1" },
                        { "key2", "value2" },
                    },
                    RelatedFindings = new[]
                    {
                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs
                        {
                            ProductArn = "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                            Id = "sample-finding-id-1",
                        },
                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs
                        {
                            ProductArn = "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                            Id = "sample-finding-id-2",
                        },
                    },
                    Note = new AwsNative.SecurityHub.Inputs.AutomationRuleNoteUpdateArgs
                    {
                        Text = "sample-note-text",
                        UpdatedBy = "sechub",
                    },
                    VerificationState = AwsNative.SecurityHub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,
                    Workflow = new AwsNative.SecurityHub.Inputs.AutomationRuleWorkflowUpdateArgs
                    {
                        Status = AwsNative.SecurityHub.AutomationRuleWorkflowUpdateStatus.Notified,
                    },
                },
            },
        },
        Tags = 
        {
            { "sampleTag", "sampleValue" },
            { "organizationUnit", "pnw" },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityhub.NewAutomationRule(ctx, "ruleWithCriteriaActionsTags", &securityhub.AutomationRuleArgs{
			RuleName:    pulumi.String("Example rule name"),
			RuleOrder:   pulumi.Int(5),
			Description: pulumi.String("Example rule description."),
			IsTerminal:  pulumi.Bool(false),
			RuleStatus:  securityhub.AutomationRuleRuleStatusEnabled,
			Criteria: &securityhub.AutomationRulesFindingFiltersArgs{
				ProductName: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("GuardDuty"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("SecurityHub"),
					},
				},
				CompanyName: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("AWS"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("Private"),
					},
				},
				ProductArn: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("arn:aws:securityhub:us-west-2:123456789012:product/aws"),
					},
				},
				AwsAccountId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("123456789012"),
					},
				},
				Id: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("example-finding-id"),
					},
				},
				GeneratorId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("example-generator-id"),
					},
				},
				Type: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("type-1"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("type-2"),
					},
				},
				Description: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("description1"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("description2"),
					},
				},
				SourceUrl: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("https"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("ftp"),
					},
				},
				Title: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("title-1"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("title-2"),
					},
				},
				SeverityLabel: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("LOW"),
					},
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("HIGH"),
					},
				},
				ResourceType: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("AwsEc2Instance"),
					},
				},
				ResourcePartition: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("aws"),
					},
				},
				ResourceId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("i-1234567890"),
					},
				},
				ResourceRegion: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("us-west"),
					},
				},
				ComplianceStatus: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("FAILED"),
					},
				},
				ComplianceSecurityControlId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("EC2.3"),
					},
				},
				ComplianceAssociatedStandardsId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("ruleset/cis-aws-foundations-benchmark/v/1.2.0"),
					},
				},
				VerificationState: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("BENIGN_POSITIVE"),
					},
				},
				RecordState: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("ACTIVE"),
					},
				},
				RelatedFindingsProductArn: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("arn:aws:securityhub:eu-central-1::product/aws/securityhub"),
					},
				},
				RelatedFindingsId: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("example-finding-id-2"),
					},
				},
				NoteText: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("example-note-text"),
					},
				},
				NoteUpdatedAt: securityhub.AutomationRuleDateFilterArray{
					&securityhub.AutomationRuleDateFilterArgs{
						DateRange: &securityhub.AutomationRuleDateRangeArgs{
							Unit:  securityhub.AutomationRuleDateRangeUnitDays,
							Value: pulumi.Float64(5),
						},
					},
				},
				NoteUpdatedBy: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonPrefix,
						Value:      pulumi.String("sechub"),
					},
				},
				WorkflowStatus: securityhub.AutomationRuleStringFilterArray{
					&securityhub.AutomationRuleStringFilterArgs{
						Comparison: securityhub.AutomationRuleStringFilterComparisonEquals,
						Value:      pulumi.String("NEW"),
					},
				},
				FirstObservedAt: securityhub.AutomationRuleDateFilterArray{
					&securityhub.AutomationRuleDateFilterArgs{
						DateRange: &securityhub.AutomationRuleDateRangeArgs{
							Unit:  securityhub.AutomationRuleDateRangeUnitDays,
							Value: pulumi.Float64(5),
						},
					},
				},
				LastObservedAt: securityhub.AutomationRuleDateFilterArray{
					&securityhub.AutomationRuleDateFilterArgs{
						DateRange: &securityhub.AutomationRuleDateRangeArgs{
							Unit:  securityhub.AutomationRuleDateRangeUnitDays,
							Value: pulumi.Float64(5),
						},
					},
				},
				CreatedAt: securityhub.AutomationRuleDateFilterArray{
					&securityhub.AutomationRuleDateFilterArgs{
						DateRange: &securityhub.AutomationRuleDateRangeArgs{
							Unit:  securityhub.AutomationRuleDateRangeUnitDays,
							Value: pulumi.Float64(5),
						},
					},
				},
				UpdatedAt: securityhub.AutomationRuleDateFilterArray{
					&securityhub.AutomationRuleDateFilterArgs{
						Start: pulumi.String("2023-04-25T17:05:54.832Z"),
						End:   pulumi.String("2023-05-25T17:05:54.832Z"),
					},
				},
				ResourceTags: securityhub.AutomationRuleMapFilterArray{
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,
						Key:        pulumi.String("department"),
						Value:      pulumi.String("security"),
					},
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,
						Key:        pulumi.String("department"),
						Value:      pulumi.String("operations"),
					},
				},
				UserDefinedFields: securityhub.AutomationRuleMapFilterArray{
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonEquals,
						Key:        pulumi.String("key1"),
						Value:      pulumi.String("security"),
					},
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonEquals,
						Key:        pulumi.String("key2"),
						Value:      pulumi.String("operations"),
					},
				},
				ResourceDetailsOther: securityhub.AutomationRuleMapFilterArray{
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,
						Key:        pulumi.String("area"),
						Value:      pulumi.String("na"),
					},
					&securityhub.AutomationRuleMapFilterArgs{
						Comparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,
						Key:        pulumi.String("department"),
						Value:      pulumi.String("sales"),
					},
				},
				Confidence: securityhub.AutomationRuleNumberFilterArray{
					&securityhub.AutomationRuleNumberFilterArgs{
						Gte: pulumi.Float64(50),
						Lte: pulumi.Float64(95),
					},
				},
				Criticality: securityhub.AutomationRuleNumberFilterArray{
					&securityhub.AutomationRuleNumberFilterArgs{
						Gte: pulumi.Float64(50),
						Lte: pulumi.Float64(95),
					},
				},
			},
			Actions: securityhub.AutomationRulesActionArray{
				&securityhub.AutomationRulesActionArgs{
					Type: securityhub.AutomationRulesActionTypeFindingFieldsUpdate,
					FindingFieldsUpdate: &securityhub.AutomationRulesFindingFieldsUpdateArgs{
						Severity: &securityhub.AutomationRuleSeverityUpdateArgs{
							Product:    pulumi.Float64(50),
							Label:      securityhub.AutomationRuleSeverityUpdateLabelMedium,
							Normalized: pulumi.Int(60),
						},
						Types: pulumi.StringArray{
							pulumi.String("Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices"),
							pulumi.String("Industry Compliance"),
						},
						Confidence:  pulumi.Int(98),
						Criticality: pulumi.Int(95),
						UserDefinedFields: pulumi.StringMap{
							"key1": pulumi.String("value1"),
							"key2": pulumi.String("value2"),
						},
						RelatedFindings: securityhub.AutomationRuleRelatedFindingArray{
							&securityhub.AutomationRuleRelatedFindingArgs{
								ProductArn: pulumi.String("arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default"),
								Id:         pulumi.String("sample-finding-id-1"),
							},
							&securityhub.AutomationRuleRelatedFindingArgs{
								ProductArn: pulumi.String("arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default"),
								Id:         pulumi.String("sample-finding-id-2"),
							},
						},
						Note: &securityhub.AutomationRuleNoteUpdateArgs{
							Text:      pulumi.String("sample-note-text"),
							UpdatedBy: pulumi.String("sechub"),
						},
						VerificationState: securityhub.AutomationRulesFindingFieldsUpdateVerificationStateTruePositive,
						Workflow: &securityhub.AutomationRuleWorkflowUpdateArgs{
							Status: securityhub.AutomationRuleWorkflowUpdateStatusNotified,
						},
					},
				},
			},
			Tags: pulumi.StringMap{
				"sampleTag":        pulumi.String("sampleValue"),
				"organizationUnit": pulumi.String("pnw"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

import pulumi
import pulumi_aws_native as aws_native

rule_with_criteria_actions_tags = aws_native.securityhub.AutomationRule("ruleWithCriteriaActionsTags",
    rule_name="Example rule name",
    rule_order=5,
    description="Example rule description.",
    is_terminal=False,
    rule_status=aws_native.securityhub.AutomationRuleRuleStatus.ENABLED,
    criteria=aws_native.securityhub.AutomationRulesFindingFiltersArgs(
        product_name=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="GuardDuty",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="SecurityHub",
            ),
        ],
        company_name=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="AWS",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="Private",
            ),
        ],
        product_arn=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="arn:aws:securityhub:us-west-2:123456789012:product/aws",
            ),
        ],
        aws_account_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="123456789012",
        )],
        id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="example-finding-id",
        )],
        generator_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="example-generator-id",
        )],
        type=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="type-1",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="type-2",
            ),
        ],
        description=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="description1",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="description2",
            ),
        ],
        source_url=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="https",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="ftp",
            ),
        ],
        title=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="title-1",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
                value="title-2",
            ),
        ],
        severity_label=[
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="LOW",
            ),
            aws_native.securityhub.AutomationRuleStringFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
                value="HIGH",
            ),
        ],
        resource_type=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="AwsEc2Instance",
        )],
        resource_partition=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="aws",
        )],
        resource_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
            value="i-1234567890",
        )],
        resource_region=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
            value="us-west",
        )],
        compliance_status=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="FAILED",
        )],
        compliance_security_control_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="EC2.3",
        )],
        compliance_associated_standards_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="ruleset/cis-aws-foundations-benchmark/v/1.2.0",
        )],
        verification_state=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="BENIGN_POSITIVE",
        )],
        record_state=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="ACTIVE",
        )],
        related_findings_product_arn=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="arn:aws:securityhub:eu-central-1::product/aws/securityhub",
        )],
        related_findings_id=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="example-finding-id-2",
        )],
        note_text=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="example-note-text",
        )],
        note_updated_at=[aws_native.securityhub.AutomationRuleDateFilterArgs(
            date_range=aws_native.securityhub.AutomationRuleDateRangeArgs(
                unit=aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,
                value=5,
            ),
        )],
        note_updated_by=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,
            value="sechub",
        )],
        workflow_status=[aws_native.securityhub.AutomationRuleStringFilterArgs(
            comparison=aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,
            value="NEW",
        )],
        first_observed_at=[aws_native.securityhub.AutomationRuleDateFilterArgs(
            date_range=aws_native.securityhub.AutomationRuleDateRangeArgs(
                unit=aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,
                value=5,
            ),
        )],
        last_observed_at=[aws_native.securityhub.AutomationRuleDateFilterArgs(
            date_range=aws_native.securityhub.AutomationRuleDateRangeArgs(
                unit=aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,
                value=5,
            ),
        )],
        created_at=[aws_native.securityhub.AutomationRuleDateFilterArgs(
            date_range=aws_native.securityhub.AutomationRuleDateRangeArgs(
                unit=aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,
                value=5,
            ),
        )],
        updated_at=[aws_native.securityhub.AutomationRuleDateFilterArgs(
            start="2023-04-25T17:05:54.832Z",
            end="2023-05-25T17:05:54.832Z",
        )],
        resource_tags=[
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,
                key="department",
                value="security",
            ),
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,
                key="department",
                value="operations",
            ),
        ],
        user_defined_fields=[
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,
                key="key1",
                value="security",
            ),
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,
                key="key2",
                value="operations",
            ),
        ],
        resource_details_other=[
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,
                key="area",
                value="na",
            ),
            aws_native.securityhub.AutomationRuleMapFilterArgs(
                comparison=aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,
                key="department",
                value="sales",
            ),
        ],
        confidence=[aws_native.securityhub.AutomationRuleNumberFilterArgs(
            gte=50,
            lte=95,
        )],
        criticality=[aws_native.securityhub.AutomationRuleNumberFilterArgs(
            gte=50,
            lte=95,
        )],
    ),
    actions=[aws_native.securityhub.AutomationRulesActionArgs(
        type=aws_native.securityhub.AutomationRulesActionType.FINDING_FIELDS_UPDATE,
        finding_fields_update=aws_native.securityhub.AutomationRulesFindingFieldsUpdateArgs(
            severity=aws_native.securityhub.AutomationRuleSeverityUpdateArgs(
                product=50,
                label=aws_native.securityhub.AutomationRuleSeverityUpdateLabel.MEDIUM,
                normalized=60,
            ),
            types=[
                "Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices",
                "Industry Compliance",
            ],
            confidence=98,
            criticality=95,
            user_defined_fields={
                "key1": "value1",
                "key2": "value2",
            },
            related_findings=[
                aws_native.securityhub.AutomationRuleRelatedFindingArgs(
                    product_arn="arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                    id="sample-finding-id-1",
                ),
                aws_native.securityhub.AutomationRuleRelatedFindingArgs(
                    product_arn="arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                    id="sample-finding-id-2",
                ),
            ],
            note=aws_native.securityhub.AutomationRuleNoteUpdateArgs(
                text="sample-note-text",
                updated_by="sechub",
            ),
            verification_state=aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TRUE_POSITIVE,
            workflow=aws_native.securityhub.AutomationRuleWorkflowUpdateArgs(
                status=aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.NOTIFIED,
            ),
        ),
    )],
    tags={
        "sampleTag": "sampleValue",
        "organizationUnit": "pnw",
    })

import * as pulumi from "@pulumi/pulumi";
import * as aws_native from "@pulumi/aws-native";

const ruleWithCriteriaActionsTags = new aws_native.securityhub.AutomationRule("ruleWithCriteriaActionsTags", {
    ruleName: "Example rule name",
    ruleOrder: 5,
    description: "Example rule description.",
    isTerminal: false,
    ruleStatus: aws_native.securityhub.AutomationRuleRuleStatus.Enabled,
    criteria: {
        productName: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "GuardDuty",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "SecurityHub",
            },
        ],
        companyName: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "AWS",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "Private",
            },
        ],
        productArn: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "arn:aws:securityhub:us-west-2:123456789012:product/aws",
            },
        ],
        awsAccountId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "123456789012",
        }],
        id: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "example-finding-id",
        }],
        generatorId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "example-generator-id",
        }],
        type: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "type-1",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "type-2",
            },
        ],
        description: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "description1",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "description2",
            },
        ],
        sourceUrl: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "https",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "ftp",
            },
        ],
        title: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "title-1",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
                value: "title-2",
            },
        ],
        severityLabel: [
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "LOW",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
                value: "HIGH",
            },
        ],
        resourceType: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "AwsEc2Instance",
        }],
        resourcePartition: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "aws",
        }],
        resourceId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
            value: "i-1234567890",
        }],
        resourceRegion: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
            value: "us-west",
        }],
        complianceStatus: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "FAILED",
        }],
        complianceSecurityControlId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "EC2.3",
        }],
        complianceAssociatedStandardsId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "ruleset/cis-aws-foundations-benchmark/v/1.2.0",
        }],
        verificationState: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "BENIGN_POSITIVE",
        }],
        recordState: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "ACTIVE",
        }],
        relatedFindingsProductArn: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "arn:aws:securityhub:eu-central-1::product/aws/securityhub",
        }],
        relatedFindingsId: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "example-finding-id-2",
        }],
        noteText: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "example-note-text",
        }],
        noteUpdatedAt: [{
            dateRange: {
                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,
                value: 5,
            },
        }],
        noteUpdatedBy: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,
            value: "sechub",
        }],
        workflowStatus: [{
            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,
            value: "NEW",
        }],
        firstObservedAt: [{
            dateRange: {
                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,
                value: 5,
            },
        }],
        lastObservedAt: [{
            dateRange: {
                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,
                value: 5,
            },
        }],
        createdAt: [{
            dateRange: {
                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,
                value: 5,
            },
        }],
        updatedAt: [{
            start: "2023-04-25T17:05:54.832Z",
            end: "2023-05-25T17:05:54.832Z",
        }],
        resourceTags: [
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,
                key: "department",
                value: "security",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,
                key: "department",
                value: "operations",
            },
        ],
        userDefinedFields: [
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,
                key: "key1",
                value: "security",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,
                key: "key2",
                value: "operations",
            },
        ],
        resourceDetailsOther: [
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,
                key: "area",
                value: "na",
            },
            {
                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,
                key: "department",
                value: "sales",
            },
        ],
        confidence: [{
            gte: 50,
            lte: 95,
        }],
        criticality: [{
            gte: 50,
            lte: 95,
        }],
    },
    actions: [{
        type: aws_native.securityhub.AutomationRulesActionType.FindingFieldsUpdate,
        findingFieldsUpdate: {
            severity: {
                product: 50,
                label: aws_native.securityhub.AutomationRuleSeverityUpdateLabel.Medium,
                normalized: 60,
            },
            types: [
                "Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices",
                "Industry Compliance",
            ],
            confidence: 98,
            criticality: 95,
            userDefinedFields: {
                key1: "value1",
                key2: "value2",
            },
            relatedFindings: [
                {
                    productArn: "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                    id: "sample-finding-id-1",
                },
                {
                    productArn: "arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default",
                    id: "sample-finding-id-2",
                },
            ],
            note: {
                text: "sample-note-text",
                updatedBy: "sechub",
            },
            verificationState: aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,
            workflow: {
                status: aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.Notified,
            },
        },
    }],
    tags: {
        sampleTag: "sampleValue",
        organizationUnit: "pnw",
    },
});