What is CAN1-RuleEvaluation?

Last updated: January 24, 2025

Security Hub automation rules allow you to automatically update or suppress findings in near-real time. You can automatically update various fields in findings, suppress findings, update finding severity and workflow status, add notes, and more. You can set criteria such as finding title or severity to make sure rules act only on relevant findings. This feature is priced by the quantity of automation rule evaluations per month. Anything over the first 1,000,000 rule evaluations per month is charged on a per-one-million-event basis.