AWS CDK Reference

Appearance

v2.274.0

SecurityControlsConfigurationProperty Struct ​

An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy.

The enablement status of a control is aligned across all of the enabled standards in an account.

This property is required only if ServiceEnabled is set to true in your configuration policy.

Source
Generated code
Type last changed
v2.145.0 · 7 Jun 2024

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_securityhub as securityhub } from 'aws-cdk-lib';
const securityControlsConfigurationProperty: securityhub.CfnConfigurationPolicy.SecurityControlsConfigurationProperty = {
  disabledSecurityControlIdentifiers: ['disabledSecurityControlIdentifiers'],
  enabledSecurityControlIdentifiers: ['enabledSecurityControlIdentifiers'],
  securityControlCustomParameters: [{
    parameters: {
      parametersKey: {
        valueType: 'valueType',

        // the properties below are optional
        value: {
          boolean: false,
          double: 123,
          enum: 'enum',
          enumList: ['enumList'],
          integer: 123,
          integerList: [123],
          string: 'string',
          stringList: ['stringList'],
        },
      },
    },
    securityControlId: 'securityControlId',
  }],
};

Properties ​

disabledSecurityControlIdentifiersoptionalstring[]disabled_security_control_identifiersoptionaltyping.List[str]disabledSecurityControlIdentifiersoptionalList<String>DisabledSecurityControlIdentifiersoptionalstring[]DisabledSecurityControlIdentifiersoptional*[]*string#
A list of security controls that are disabled in the configuration policy.
notes

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide DisabledSecurityControlIdentifiers , Security Hub CSPM enables all other controls not in the list, and enables AutoEnableControls .

enabledSecurityControlIdentifiersoptionalstring[]enabled_security_control_identifiersoptionaltyping.List[str]enabledSecurityControlIdentifiersoptionalList<String>EnabledSecurityControlIdentifiersoptionalstring[]EnabledSecurityControlIdentifiersoptional*[]*string#
A list of security controls that are enabled in the configuration policy.
notes

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide EnabledSecurityControlIdentifiers , Security Hub CSPM disables all other controls not in the list, and disables AutoEnableControls .

securityControlCustomParametersoptionalIResolvable | IResolvable | CfnConfigurationPolicy.SecurityControlCustomParameterProperty[]security_control_custom_parametersoptionaltyping.Union[IResolvable, typing.List[typing.Union[IResolvable, SecurityControlCustomParameterProperty]]]securityControlCustomParametersoptionalIResolvableSecurityControlCustomParametersoptionalIResolvableSecurityControlCustomParametersoptionalinterface{}#
A list of security controls and control parameter values that are included in a configuration policy.