Severity
class Severity
The severity of the finding.
The finding provider can provide the initial severity. The finding provider can only update the severity if it hasn't been updated using BatchUpdateFindings
.
The finding must have either Label
or Normalized
populated. If only one of these attributes is populated, then Security Hub automatically populates the other one. If neither attribute is populated, then the finding is invalid. Label
is the preferred attribute.