Class CfnConfigurationPolicy.SecurityControlsConfigurationProperty

An object that defines which security controls are enabled in an AWS Security Hub configuration policy.

Inheritance

System.Object

CfnConfigurationPolicy.SecurityControlsConfigurationProperty

Implements

CfnConfigurationPolicy.ISecurityControlsConfigurationProperty

Namespace: Amazon.CDK.AWS.SecurityHub

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public class SecurityControlsConfigurationProperty : Object, CfnConfigurationPolicy.ISecurityControlsConfigurationProperty

Syntax (vb)

Public Class SecurityControlsConfigurationProperty
    Inherits Object
    Implements CfnConfigurationPolicy.ISecurityControlsConfigurationProperty

Remarks

The enablement status of a control is aligned across all of the enabled standards in an account.

This property is required only if ServiceEnabled is set to true in your configuration policy.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.SecurityHub;

var securityControlsConfigurationProperty = new SecurityControlsConfigurationProperty {
    DisabledSecurityControlIdentifiers = new [] { "disabledSecurityControlIdentifiers" },
    EnabledSecurityControlIdentifiers = new [] { "enabledSecurityControlIdentifiers" },
    SecurityControlCustomParameters = new [] { new SecurityControlCustomParameterProperty {
        Parameters = new Dictionary<string, object> {
            { "parametersKey", new ParameterConfigurationProperty {
                ValueType = "valueType",

                // the properties below are optional
                Value = new ParameterValueProperty {
                    Boolean = false,
                    Double = 123,
                    Enum = "enum",
                    EnumList = new [] { "enumList" },
                    Integer = 123,
                    IntegerList = new [] { 123 },
                    String = "string",
                    StringList = new [] { "stringList" }
                }
            } }
        },
        SecurityControlId = "securityControlId"
    } }
};

Synopsis

Constructors

SecurityControlsConfigurationProperty()

Properties

DisabledSecurityControlIdentifiers	A list of security controls that are disabled in the configuration policy.
EnabledSecurityControlIdentifiers	A list of security controls that are enabled in the configuration policy.
SecurityControlCustomParameters	A list of security controls and control parameter values that are included in a configuration policy.

Constructors

SecurityControlsConfigurationProperty()

public SecurityControlsConfigurationProperty()

Properties

DisabledSecurityControlIdentifiers

A list of security controls that are disabled in the configuration policy.

public string[] DisabledSecurityControlIdentifiers { get; set; }

Property Value

System.String[]

Remarks

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide DisabledSecurityControlIdentifiers , Security Hub enables all other controls not in the list, and enables AutoEnableControls .

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-disabledsecuritycontrolidentifiers

EnabledSecurityControlIdentifiers

A list of security controls that are enabled in the configuration policy.

public string[] EnabledSecurityControlIdentifiers { get; set; }

Property Value

System.String[]

Remarks

Provide only one of EnabledSecurityControlIdentifiers or DisabledSecurityControlIdentifiers .

If you provide EnabledSecurityControlIdentifiers , Security Hub disables all other controls not in the list, and disables AutoEnableControls .

SecurityControlCustomParameters

A list of security controls and control parameter values that are included in a configuration policy.

public object SecurityControlCustomParameters { get; set; }