CfnSecurityProfileProps

class aws_cdk.aws_iot.CfnSecurityProfileProps(*, additional_metrics_to_retain_v2=None, alert_targets=None, behaviors=None, metrics_export_config=None, security_profile_description=None, security_profile_name=None, tags=None, target_arns=None)

Bases: object

Properties for defining a CfnSecurityProfile.

Parameters:
  • additional_metrics_to_retain_v2 (Union[IResolvable, Sequence[Union[IResolvable, MetricToRetainProperty, Dict[str, Any]]], None]) – A list of metrics whose data is retained (stored). By default, data is retained for any metric used in the profile’s behaviors , but it’s also retained for any metric specified here. Can be used with custom metrics; can’t be used with dimensions.

  • alert_targets (Union[IResolvable, Mapping[str, Union[IResolvable, AlertTargetProperty, Dict[str, Any]]], None]) – Specifies the destinations to which alerts are sent. (Alerts are always sent to the console.) Alerts are generated when a device (thing) violates a behavior.

  • behaviors (Union[IResolvable, Sequence[Union[IResolvable, BehaviorProperty, Dict[str, Any]]], None]) – Specifies the behaviors that, when violated by a device (thing), cause an alert.

  • metrics_export_config (Union[IResolvable, MetricsExportConfigProperty, Dict[str, Any], None]) – Specifies the MQTT topic and role ARN required for metric export.

  • security_profile_description (Optional[str]) – A description of the security profile.

  • security_profile_name (Optional[str]) – The name you gave to the security profile.

  • tags (Optional[Sequence[Union[CfnTag, Dict[str, Any]]]]) – Metadata that can be used to manage the security profile.

  • target_arns (Optional[Sequence[str]]) – The ARN of the target (thing group) to which the security profile is attached.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk import aws_iot as iot

cfn_security_profile_props = iot.CfnSecurityProfileProps(
    additional_metrics_to_retain_v2=[iot.CfnSecurityProfile.MetricToRetainProperty(
        metric="metric",

        # the properties below are optional
        export_metric=False,
        metric_dimension=iot.CfnSecurityProfile.MetricDimensionProperty(
            dimension_name="dimensionName",

            # the properties below are optional
            operator="operator"
        )
    )],
    alert_targets={
        "alert_targets_key": iot.CfnSecurityProfile.AlertTargetProperty(
            alert_target_arn="alertTargetArn",
            role_arn="roleArn"
        )
    },
    behaviors=[iot.CfnSecurityProfile.BehaviorProperty(
        name="name",

        # the properties below are optional
        criteria=iot.CfnSecurityProfile.BehaviorCriteriaProperty(
            comparison_operator="comparisonOperator",
            consecutive_datapoints_to_alarm=123,
            consecutive_datapoints_to_clear=123,
            duration_seconds=123,
            ml_detection_config=iot.CfnSecurityProfile.MachineLearningDetectionConfigProperty(
                confidence_level="confidenceLevel"
            ),
            statistical_threshold=iot.CfnSecurityProfile.StatisticalThresholdProperty(
                statistic="statistic"
            ),
            value=iot.CfnSecurityProfile.MetricValueProperty(
                cidrs=["cidrs"],
                count="count",
                number=123,
                numbers=[123],
                ports=[123],
                strings=["strings"]
            )
        ),
        export_metric=False,
        metric="metric",
        metric_dimension=iot.CfnSecurityProfile.MetricDimensionProperty(
            dimension_name="dimensionName",

            # the properties below are optional
            operator="operator"
        ),
        suppress_alerts=False
    )],
    metrics_export_config=iot.CfnSecurityProfile.MetricsExportConfigProperty(
        mqtt_topic="mqttTopic",
        role_arn="roleArn"
    ),
    security_profile_description="securityProfileDescription",
    security_profile_name="securityProfileName",
    tags=[CfnTag(
        key="key",
        value="value"
    )],
    target_arns=["targetArns"]
)

Attributes

additional_metrics_to_retain_v2

A list of metrics whose data is retained (stored).

By default, data is retained for any metric used in the profile’s behaviors , but it’s also retained for any metric specified here. Can be used with custom metrics; can’t be used with dimensions.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-additionalmetricstoretainv2

alert_targets

Specifies the destinations to which alerts are sent.

(Alerts are always sent to the console.) Alerts are generated when a device (thing) violates a behavior.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-alerttargets

behaviors

Specifies the behaviors that, when violated by a device (thing), cause an alert.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-behaviors

metrics_export_config

Specifies the MQTT topic and role ARN required for metric export.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-metricsexportconfig

security_profile_description

A description of the security profile.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-securityprofiledescription

security_profile_name

The name you gave to the security profile.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-securityprofilename

tags

Metadata that can be used to manage the security profile.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-tags

target_arns

The ARN of the target (thing group) to which the security profile is attached.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-securityprofile.html#cfn-iot-securityprofile-targetarns