AWS::SecurityHub::SecurityControl ParameterConfiguration

An object that provides the current value of a security control parameter and identifies whether it has been customized.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
  "Value" : ParameterValue,
  "ValueType" : String
}

YAML

  Value: 
    ParameterValue
  ValueType: String

Properties

Value

The current value of a control parameter.

Required: No

Type: ParameterValue

Update requires: No interruption

ValueType

Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub behavior.

When ValueType is set equal to DEFAULT, the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When ValueType is set equal to DEFAULT, Security Hub ignores user-provided input for the Value field.

When ValueType is set equal to CUSTOM, the Value field can't be empty.

Required: Yes

Type: String

Allowed values: DEFAULT | CUSTOM

Update requires: No interruption