Package software.amazon.awscdk.services.securityhub
package software.amazon.awscdk.services.securityhub
AWS Security Hub Construct Library
This module is part of the AWS Cloud Development Kit project.
import software.amazon.awscdk.services.securityhub.*;
There are no official hand-written (L2) constructs for this service yet. Here are some suggestions on how to proceed:
- Search Construct Hub for SecurityHub construct libraries
- Use the automatically generated L1 constructs, in the same way you would use the CloudFormation AWS::SecurityHub resources directly.
There are no hand-written (L2) constructs for this service yet. However, you can still use the automatically generated L1 constructs, and use this service exactly as you would using CloudFormation directly.
For more information on the resources and properties available for this service, see the CloudFormation documentation for AWS::SecurityHub.
(Read the CDK Contributing Guide and submit an RFC if you are interested in contributing to this construct library.)
-
ClassDescriptionA reference to a AggregatorV2 resource.A builder for
AggregatorV2ReferenceAn implementation forAggregatorV2ReferenceA reference to a AutomationRule resource.A builder forAutomationRuleReferenceAn implementation forAutomationRuleReferenceA reference to a AutomationRuleV2 resource.A builder forAutomationRuleV2ReferenceAn implementation forAutomationRuleV2ReferenceEnables aggregation across AWS Regions .A fluent builder forCfnAggregatorV2.Properties for defining aCfnAggregatorV2.A builder forCfnAggregatorV2PropsAn implementation forCfnAggregatorV2PropsTheAWS::SecurityHub::AutomationRuleresource specifies an automation rule based on input parameters.One or more actions that AWS Security Hub takes when a finding matches the defined criteria of a rule.A builder forCfnAutomationRule.AutomationRulesActionPropertyAn implementation forCfnAutomationRule.AutomationRulesActionPropertyIdentifies the finding fields that the automation rule action updates when a finding matches the defined criteria.An implementation forCfnAutomationRule.AutomationRulesFindingFieldsUpdatePropertyThe criteria that determine which findings a rule applies to.A builder forCfnAutomationRule.AutomationRulesFindingFiltersPropertyAn implementation forCfnAutomationRule.AutomationRulesFindingFiltersPropertyA fluent builder forCfnAutomationRule.A date filter for querying findings.A builder forCfnAutomationRule.DateFilterPropertyAn implementation forCfnAutomationRule.DateFilterPropertyA date range for the date filter.A builder forCfnAutomationRule.DateRangePropertyAn implementation forCfnAutomationRule.DateRangePropertyA map filter for filtering AWS Security Hub findings.A builder forCfnAutomationRule.MapFilterPropertyAn implementation forCfnAutomationRule.MapFilterPropertyThe updated note.A builder forCfnAutomationRule.NoteUpdatePropertyAn implementation forCfnAutomationRule.NoteUpdatePropertyA number filter for querying findings.A builder forCfnAutomationRule.NumberFilterPropertyAn implementation forCfnAutomationRule.NumberFilterPropertyProvides details about a list of findings that the current finding relates to.A builder forCfnAutomationRule.RelatedFindingPropertyAn implementation forCfnAutomationRule.RelatedFindingPropertyUpdates to the severity information for a finding.A builder forCfnAutomationRule.SeverityUpdatePropertyAn implementation forCfnAutomationRule.SeverityUpdatePropertyA string filter for filtering AWS Security Hub findings.A builder forCfnAutomationRule.StringFilterPropertyAn implementation forCfnAutomationRule.StringFilterPropertyUsed to update information about the investigation into the finding.A builder forCfnAutomationRule.WorkflowUpdatePropertyAn implementation forCfnAutomationRule.WorkflowUpdatePropertyProperties for defining aCfnAutomationRule.A builder forCfnAutomationRulePropsAn implementation forCfnAutomationRulePropsCreates a V2 automation rule.Allows you to configure automated responses.A builder forCfnAutomationRuleV2.AutomationRulesActionV2PropertyAn implementation forCfnAutomationRuleV2.AutomationRulesActionV2PropertyAllows you to define the structure for modifying specific fields in security findings.An implementation forCfnAutomationRuleV2.AutomationRulesFindingFieldsUpdateV2PropertyBoolean filter for querying findings.A builder forCfnAutomationRuleV2.BooleanFilterPropertyAn implementation forCfnAutomationRuleV2.BooleanFilterPropertyA fluent builder forCfnAutomationRuleV2.Enables the creation of filtering criteria for security findings.A builder forCfnAutomationRuleV2.CompositeFilterPropertyAn implementation forCfnAutomationRuleV2.CompositeFilterPropertyThe filtering type and configuration of the automation rule.A builder forCfnAutomationRuleV2.CriteriaPropertyAn implementation forCfnAutomationRuleV2.CriteriaPropertyA date filter for querying findings.A builder forCfnAutomationRuleV2.DateFilterPropertyAn implementation forCfnAutomationRuleV2.DateFilterPropertyA date range for the date filter.A builder forCfnAutomationRuleV2.DateRangePropertyAn implementation forCfnAutomationRuleV2.DateRangePropertyThe settings for integrating automation rule actions with external systems or service.An implementation forCfnAutomationRuleV2.ExternalIntegrationConfigurationPropertyA map filter for filtering AWS Security Hub findings.A builder forCfnAutomationRuleV2.MapFilterPropertyAn implementation forCfnAutomationRuleV2.MapFilterPropertyA number filter for querying findings.A builder forCfnAutomationRuleV2.NumberFilterPropertyAn implementation forCfnAutomationRuleV2.NumberFilterPropertyEnables filtering of security findings based on boolean field values in OCSF.A builder forCfnAutomationRuleV2.OcsfBooleanFilterPropertyAn implementation forCfnAutomationRuleV2.OcsfBooleanFilterPropertyEnables filtering of security findings based on date and timestamp fields in OCSF.A builder forCfnAutomationRuleV2.OcsfDateFilterPropertyAn implementation forCfnAutomationRuleV2.OcsfDateFilterPropertySpecifies the filtering criteria for security findings using OCSF.A builder forCfnAutomationRuleV2.OcsfFindingFiltersPropertyAn implementation forCfnAutomationRuleV2.OcsfFindingFiltersPropertyEnables filtering of security findings based on map field values in OCSF.A builder forCfnAutomationRuleV2.OcsfMapFilterPropertyAn implementation forCfnAutomationRuleV2.OcsfMapFilterPropertyEnables filtering of security findings based on numerical field values in OCSF.A builder forCfnAutomationRuleV2.OcsfNumberFilterPropertyAn implementation forCfnAutomationRuleV2.OcsfNumberFilterPropertyEnables filtering of security findings based on string field values in OCSF.A builder forCfnAutomationRuleV2.OcsfStringFilterPropertyAn implementation forCfnAutomationRuleV2.OcsfStringFilterPropertyA string filter for filtering AWS Security Hub findings.A builder forCfnAutomationRuleV2.StringFilterPropertyAn implementation forCfnAutomationRuleV2.StringFilterPropertyProperties for defining aCfnAutomationRuleV2.A builder forCfnAutomationRuleV2PropsAn implementation forCfnAutomationRuleV2PropsTheAWS::SecurityHub::ConfigurationPolicyresource creates a central configuration policy with the defined settings.A fluent builder forCfnConfigurationPolicy.An object that provides the current value of a security control parameter and identifies whether it has been customized.A builder forCfnConfigurationPolicy.ParameterConfigurationPropertyAn implementation forCfnConfigurationPolicy.ParameterConfigurationPropertyAn object that includes the data type of a security control parameter and its current value.A builder forCfnConfigurationPolicy.ParameterValuePropertyAn implementation forCfnConfigurationPolicy.ParameterValuePropertyAn object that defines how AWS Security Hub is configured.A builder forCfnConfigurationPolicy.PolicyPropertyAn implementation forCfnConfigurationPolicy.PolicyPropertyA list of security controls and control parameter values that are included in a configuration policy.An implementation forCfnConfigurationPolicy.SecurityControlCustomParameterPropertyAn object that defines which security controls are enabled in an AWS Security Hub configuration policy.An implementation forCfnConfigurationPolicy.SecurityControlsConfigurationPropertyAn object that defines how AWS Security Hub is configured.A builder forCfnConfigurationPolicy.SecurityHubPolicyPropertyAn implementation forCfnConfigurationPolicy.SecurityHubPolicyPropertyProperties for defining aCfnConfigurationPolicy.A builder forCfnConfigurationPolicyPropsAn implementation forCfnConfigurationPolicyPropsTheAWS::SecurityHub::DelegatedAdminresource designates the delegated AWS Security Hub administrator account for an organization.A fluent builder forCfnDelegatedAdmin.Properties for defining aCfnDelegatedAdmin.A builder forCfnDelegatedAdminPropsAn implementation forCfnDelegatedAdminPropsTheAWS::SecurityHub::FindingAggregatorresource enables cross-Region aggregation.A fluent builder forCfnFindingAggregator.Properties for defining aCfnFindingAggregator.A builder forCfnFindingAggregatorPropsAn implementation forCfnFindingAggregatorPropsTheAWS::SecurityHub::Hubresource specifies the enablement of the AWS Security Hub service in your AWS account .A fluent builder forCfnHub.Properties for defining aCfnHub.A builder forCfnHubPropsAn implementation forCfnHubPropsReturns details about the service resource in your account.A fluent builder forCfnHubV2.Properties for defining aCfnHubV2.A builder forCfnHubV2PropsAn implementation forCfnHubV2PropsTheAWS::SecurityHub::Insightresource creates a custom insight in AWS Security Hub .A collection of filters that are applied to all active findings aggregated by AWS Security Hub .A builder forCfnInsight.AwsSecurityFindingFiltersPropertyAn implementation forCfnInsight.AwsSecurityFindingFiltersPropertyBoolean filter for querying findings.A builder forCfnInsight.BooleanFilterPropertyAn implementation forCfnInsight.BooleanFilterPropertyA fluent builder forCfnInsight.A date filter for querying findings.A builder forCfnInsight.DateFilterPropertyAn implementation forCfnInsight.DateFilterPropertyA date range for the date filter.A builder forCfnInsight.DateRangePropertyAn implementation forCfnInsight.DateRangePropertyThe IP filter for querying findings.A builder forCfnInsight.IpFilterPropertyAn implementation forCfnInsight.IpFilterPropertyA keyword filter for querying findings.A builder forCfnInsight.KeywordFilterPropertyAn implementation forCfnInsight.KeywordFilterPropertyA map filter for filtering AWS Security Hub findings.A builder forCfnInsight.MapFilterPropertyAn implementation forCfnInsight.MapFilterPropertyA number filter for querying findings.A builder forCfnInsight.NumberFilterPropertyAn implementation forCfnInsight.NumberFilterPropertyA string filter for filtering AWS Security Hub findings.A builder forCfnInsight.StringFilterPropertyAn implementation forCfnInsight.StringFilterPropertyProperties for defining aCfnInsight.A builder forCfnInsightPropsAn implementation forCfnInsightPropsTheAWS::SecurityHub::OrganizationConfigurationresource specifies the way that your AWS organization is configured in AWS Security Hub .A fluent builder forCfnOrganizationConfiguration.Properties for defining aCfnOrganizationConfiguration.A builder forCfnOrganizationConfigurationPropsAn implementation forCfnOrganizationConfigurationPropsTheAWS::SecurityHub::PolicyAssociationresource specifies associations for a configuration policy or a self-managed configuration.A fluent builder forCfnPolicyAssociation.Properties for defining aCfnPolicyAssociation.A builder forCfnPolicyAssociationPropsAn implementation forCfnPolicyAssociationPropsTheAWS::SecurityHub::ProductSubscriptionresource creates a subscription to a third-party product that generates findings that you want to receive in AWS Security Hub .A fluent builder forCfnProductSubscription.Properties for defining aCfnProductSubscription.A builder forCfnProductSubscriptionPropsAn implementation forCfnProductSubscriptionPropsTheAWS::SecurityHub::SecurityControlresource specifies custom parameter values for an AWS Security Hub control.A fluent builder forCfnSecurityControl.An object that provides the current value of a security control parameter and identifies whether it has been customized.A builder forCfnSecurityControl.ParameterConfigurationPropertyAn implementation forCfnSecurityControl.ParameterConfigurationPropertyAn object that includes the data type of a security control parameter and its current value.A builder forCfnSecurityControl.ParameterValuePropertyAn implementation forCfnSecurityControl.ParameterValuePropertyProperties for defining aCfnSecurityControl.A builder forCfnSecurityControlPropsAn implementation forCfnSecurityControlPropsTheAWS::SecurityHub::Standardresource specifies the enablement of a security standard.A fluent builder forCfnStandard.Provides details about an individual security control.A builder forCfnStandard.StandardsControlPropertyAn implementation forCfnStandard.StandardsControlPropertyProperties for defining aCfnStandard.A builder forCfnStandardPropsAn implementation forCfnStandardPropsA reference to a ConfigurationPolicy resource.A builder forConfigurationPolicyReferenceAn implementation forConfigurationPolicyReferenceA reference to a DelegatedAdmin resource.A builder forDelegatedAdminReferenceAn implementation forDelegatedAdminReferenceA reference to a FindingAggregator resource.A builder forFindingAggregatorReferenceAn implementation forFindingAggregatorReferenceA reference to a Hub resource.A builder forHubReferenceAn implementation forHubReferenceA reference to a HubV2 resource.A builder forHubV2ReferenceAn implementation forHubV2Reference(experimental) Indicates that this resource can be referenced as a AggregatorV2.Internal default implementation forIAggregatorV2Ref.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a AutomationRule.Internal default implementation forIAutomationRuleRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a AutomationRuleV2.Internal default implementation forIAutomationRuleV2Ref.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a ConfigurationPolicy.Internal default implementation forIConfigurationPolicyRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a DelegatedAdmin.Internal default implementation forIDelegatedAdminRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a FindingAggregator.Internal default implementation forIFindingAggregatorRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a Hub.Internal default implementation forIHubRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a HubV2.Internal default implementation forIHubV2Ref.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a Insight.Internal default implementation forIInsightRef.A proxy class which represents a concrete javascript instance of this type.A reference to a Insight resource.A builder forInsightReferenceAn implementation forInsightReference(experimental) Indicates that this resource can be referenced as a OrganizationConfiguration.Internal default implementation forIOrganizationConfigurationRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a PolicyAssociation.Internal default implementation forIPolicyAssociationRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a ProductSubscription.Internal default implementation forIProductSubscriptionRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a SecurityControl.Internal default implementation forISecurityControlRef.A proxy class which represents a concrete javascript instance of this type.(experimental) Indicates that this resource can be referenced as a Standard.Internal default implementation forIStandardRef.A proxy class which represents a concrete javascript instance of this type.A reference to a OrganizationConfiguration resource.A builder forOrganizationConfigurationReferenceAn implementation forOrganizationConfigurationReferenceA reference to a PolicyAssociation resource.A builder forPolicyAssociationReferenceAn implementation forPolicyAssociationReferenceA reference to a ProductSubscription resource.A builder forProductSubscriptionReferenceAn implementation forProductSubscriptionReferenceA reference to a SecurityControl resource.A builder forSecurityControlReferenceAn implementation forSecurityControlReferenceA reference to a Standard resource.A builder forStandardReferenceAn implementation forStandardReference