SecurityControlsConfiguration
An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
Contents
- DisabledSecurityControlIdentifiers
-
A list of security controls that are disabled in the configuration policy. Security Hub CSPM enables all other controls (including newly released controls) other than the listed controls.
Type: Array of strings
Pattern:
.*\S.*Required: No
- EnabledSecurityControlIdentifiers
-
A list of security controls that are enabled in the configuration policy. Security Hub CSPM disables all other controls (including newly released controls) other than the listed controls.
Type: Array of strings
Pattern:
.*\S.*Required: No
- SecurityControlCustomParameters
-
A list of security controls and control parameter values that are included in a configuration policy.
Type: Array of SecurityControlCustomParameter objects
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: