AWS::SecurityHub::ConfigurationPolicy SecurityHubPolicy

An object that defines how AWS Security Hub CSPM is configured. The configuration policy includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

{
  "EnabledStandardIdentifiers" : [ String, ... ],
  "SecurityControlsConfiguration" : SecurityControlsConfiguration,
  "ServiceEnabled" : Boolean
}

  EnabledStandardIdentifiers: 
    - String
  SecurityControlsConfiguration: 
    SecurityControlsConfiguration
  ServiceEnabled: Boolean

Properties