Create eventbridge rule and sns topic for security hub

create_security_hub_topics_all_region.sh

#!/bin/bash

regions=( \
  us-east-1 \
  us-east-2 \
  us-west-1 \
  us-west-2 \
  ap-south-1 \
  ap-northeast-3 \
  ap-northeast-2 \
  ap-southeast-1 \
  ap-southeast-2 \
  ap-northeast-1 \
  ca-central-1 \
  eu-central-1 \
  eu-west-1 \
  eu-west-2 \
  eu-west-3 \
  eu-north-1 \
  sa-east-1 \
)

for region in ${regions[@]}
do
  topicArn=$(aws sns --region "$region" create-topic --name SecurityHub | jq -r '.TopicArn')
  AWS_PAGER="" aws events put-rule --region "$region" --name SecurityHub --event-pattern "{\"source\":[\"aws.securityhub\"],\"detail-type\":[\"Security Hub Findings - Imported\"],\"detail\":{\"findings\":{\"Compliance\":{\"Status\":[{\"anything-but\":\"PASSED\"}]},\"Severity\":{\"Label\":[\"CRITICAL\",\"HIGH\"]},\"Workflow\":{\"Status\":[\"NEW\"]},\"RecordState\":[\"ACTIVE\"]}}}"
  AWS_PAGER="" aws events put-targets --region "$region" --rule SecurityHub --targets "Id"="1","Arn"="$topicArn"
done