SecurityHubPolicy - AWS Security Hub

SecurityHubPolicy

An object that defines how AWS Security Hub is configured. The configuration policy includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).

Contents

EnabledStandardIdentifiers

A list that defines which security standards are enabled in the configuration policy.

Type: Array of strings

Pattern: .*\S.*

Required: No

SecurityControlsConfiguration

An object that defines which security controls are enabled in the configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.

Type: SecurityControlsConfiguration object

Required: No

ServiceEnabled

Indicates whether Security Hub is enabled in the policy.

Type: Boolean

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: