Add logging for rule matches.

schubergphilis · Jan 6, 2024 · 3748746 · 3748746
1 parent 48af194
commit 3748746
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/awsfindingsmanagerlib/awsfindingsmanagerlib.py b/awsfindingsmanagerlib/awsfindingsmanagerlib.py
@@ -570,6 +570,8 @@ def get_findings(self):
             if resource_ids_patterns:
                 matching_findings = [finding for finding in findings
                                      if finding.is_matching_resource_ids(resource_ids_patterns)]
+                self._logger.debug(f'Following findings matched with rule with note: "{rule.note}", '
+                                   f'{[finding.id for finding in matching_findings]}')
             else:
                 self._logger.debug('No resource id patterns are provided in the rule, all findings used.')
                 matching_findings = findings