Package software.amazon.awscdk.services.securityhub

Interface CfnHubProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnHubProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.97.0 (build 729de35)",
           date="2024-04-24T21:00:37.409Z")
@Stability(Stable)
public interface CfnHubProps
extends software.amazon.jsii.JsiiSerializable

Properties for defining a CfnHub.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.securityhub.*;
 Object tags;
 CfnHubProps cfnHubProps = CfnHubProps.builder()
         .autoEnableControls(false)
         .controlFindingGenerator("controlFindingGenerator")
         .enableDefaultStandards(false)
         .tags(tags)
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnHubProps.Builder	A builder for CfnHubProps
static final class	CfnHubProps.Jsii$Proxy	An implementation for CfnHubProps

Method Summary

Modifier and Type	Method	Description
static CfnHubProps.Builder	builder()
default Object	getAutoEnableControls()	Whether to automatically enable new controls when they are added to standards that are enabled.
default String	getControlFindingGenerator()	Specifies whether an account has consolidated control findings turned on or off.
default Object	getEnableDefaultStandards()	Whether to enable the security standards that Security Hub has designated as automatically enabled.
default Object	getTags()	An array of key-value pairs to apply to this resource.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getAutoEnableControls

@Stability(Stable)
@Nullable
default Object getAutoEnableControls()

Whether to automatically enable new controls when they are added to standards that are enabled.

By default, this is set to true , and new controls are enabled automatically. To not automatically enable new controls, set this to false .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-autoenablecontrols

getControlFindingGenerator

@Stability(Stable)
@Nullable
default String getControlFindingGenerator()

Specifies whether an account has consolidated control findings turned on or off.

If the value for this field is set to SECURITY_CONTROL , Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.

If the value for this field is set to STANDARD_CONTROL , Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.

The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL if you enabled Security Hub on or after February 23, 2023.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-controlfindinggenerator

getEnableDefaultStandards

@Stability(Stable)
@Nullable
default Object getEnableDefaultStandards()

Whether to enable the security standards that Security Hub has designated as automatically enabled.

If you don't provide a value for EnableDefaultStandards , it is set to true , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub . If you don't want to enable the designated standards, set EnableDefaultStandards to false .

Currently, the automatically enabled standards are the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 and AWS Foundational Security Best Practices (FSBP).

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-enabledefaultstandards

getTags

@Stability(Stable)
@Nullable
default Object getTags()

An array of key-value pairs to apply to this resource.

For more information, see Tag .

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-tags

builder

@Stability(Stable)
static CfnHubProps.Builder builder()

Returns:

a CfnHubProps.Builder of CfnHubProps