# AWS Security Hub Construct Library

This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aws-cdk) project.

```ts
import * as securityhub from 'aws-cdk-lib/aws-securityhub';
```

There are no official hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet. Here are some suggestions on how to proceed:

- Search [Construct Hub for SecurityHub construct libraries](https://constructs.dev/search?q=securityhub)
- Use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, in the same way you would use [the CloudFormation AWS::SecurityHub resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_SecurityHub.html) directly.

There are no hand-written ([L2](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_lib)) constructs for this service yet.
However, you can still use the automatically generated [L1](https://docs.aws.amazon.com/cdk/latest/guide/constructs.html#constructs_l1_using) constructs, and use this service exactly as you would using CloudFormation directly.

For more information on the resources and properties available for this service, see the [CloudFormation documentation for AWS::SecurityHub](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/AWS_SecurityHub.html).

(Read the [CDK Contributing Guide](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and submit an RFC if you are interested in contributing to this construct library.)

## Types

| Name | Kind | Summary |
| --- | --- | --- |
| [`CfnAggregatorV2`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAggregatorV2) | Construct (L1) | Enables aggregation across AWS Regions . |
| [`CfnAutomationRule`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule) | Construct (L1) | The `AWS::SecurityHub::AutomationRule` resource specifies an automation rule based on input parameters. |
| [`CfnAutomationRuleV2`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2) | Construct (L1) | Creates a V2 automation rule. |
| [`CfnConfigurationPolicy`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy) | Construct (L1) | The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. |
| [`CfnConnector`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnector) | Construct (L1) | Creates a connector to a third-party cloud provider in Security Hub CSPM. |
| [`CfnConnectorV2`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2) | Construct (L1) | Grants permission to create a connectorV2 based on input parameters. |
| [`CfnDelegatedAdmin`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnDelegatedAdmin) | Construct (L1) | The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. |
| [`CfnFindingAggregator`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnFindingAggregator) | Construct (L1) | The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. |
| [`CfnHub`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnHub) | Construct (L1) | The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . |
| [`CfnHubV2`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnHubV2) | Construct (L1) | Returns details about the service resource in your account. |
| [`CfnInsight`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight) | Construct (L1) | The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . |
| [`CfnOrganizationConfiguration`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnOrganizationConfiguration) | Construct (L1) | The `AWS::SecurityHub::OrganizationConfiguration` resource specifies the way that your AWS organization is configured in AWS Security Hub CSPM . |
| [`CfnPolicyAssociation`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnPolicyAssociation) | Construct (L1) | The `AWS::SecurityHub::PolicyAssociation` resource specifies associations for a configuration policy or a self-managed configuration. |
| [`CfnProductSubscription`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnProductSubscription) | Construct (L1) | The `AWS::SecurityHub::ProductSubscription` resource creates a subscription to a third-party product that generates findings that you want to receive in AWS Security Hub CSPM . |
| [`CfnSecurityControl`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnSecurityControl) | Construct (L1) | The `AWS::SecurityHub::SecurityControl` resource specifies custom parameter values for an AWS Security Hub CSPM control. |
| [`CfnStandard`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnStandard) | Construct (L1) | The `AWS::SecurityHub::Standard` resource specifies the enablement of a security standard. |
| [`CfnAggregatorV2Props`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAggregatorV2Props) | Struct | Properties for defining a `CfnAggregatorV2`. |
| [`CfnAutomationRule.AutomationRulesActionProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.AutomationRulesActionProperty) | Struct | One or more actions that AWS Security Hub CSPM takes when a finding matches the defined criteria of a rule. |
| [`CfnAutomationRule.AutomationRulesFindingFieldsUpdateProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.AutomationRulesFindingFieldsUpdateProperty) | Struct | Identifies the finding fields that the automation rule action updates when a finding matches the defined criteria. |
| [`CfnAutomationRule.AutomationRulesFindingFiltersProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.AutomationRulesFindingFiltersProperty) | Struct | The criteria that determine which findings a rule applies to. |
| [`CfnAutomationRule.DateFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.DateFilterProperty) | Struct | A date filter for querying findings. |
| [`CfnAutomationRule.DateRangeProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.DateRangeProperty) | Struct | A date range for the date filter. |
| [`CfnAutomationRule.MapFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.MapFilterProperty) | Struct | A map filter for filtering AWS Security Hub CSPM findings. |
| [`CfnAutomationRule.NoteUpdateProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.NoteUpdateProperty) | Struct | The updated note. |
| [`CfnAutomationRule.NumberFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.NumberFilterProperty) | Struct | A number filter for querying findings. |
| [`CfnAutomationRule.RelatedFindingProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.RelatedFindingProperty) | Struct | Provides details about a list of findings that the current finding relates to. |
| [`CfnAutomationRule.SeverityUpdateProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.SeverityUpdateProperty) | Struct | Updates to the severity information for a finding. |
| [`CfnAutomationRule.StringFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.StringFilterProperty) | Struct | A string filter for filtering AWS Security Hub CSPM findings. |
| [`CfnAutomationRule.WorkflowUpdateProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRule.WorkflowUpdateProperty) | Struct | Used to update information about the investigation into the finding. |
| [`CfnAutomationRuleProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleProps) | Struct | Properties for defining a `CfnAutomationRule`. |
| [`CfnAutomationRuleV2.AutomationRulesActionV2Property`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.AutomationRulesActionV2Property) | Struct | Allows you to configure automated responses. |
| [`CfnAutomationRuleV2.AutomationRulesFindingFieldsUpdateV2Property`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.AutomationRulesFindingFieldsUpdateV2Property) | Struct | Allows you to define the structure for modifying specific fields in security findings. |
| [`CfnAutomationRuleV2.BooleanFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.BooleanFilterProperty) | Struct | Boolean filter for querying findings. |
| [`CfnAutomationRuleV2.CompositeFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.CompositeFilterProperty) | Struct | Enables the creation of filtering criteria for security findings. |
| [`CfnAutomationRuleV2.CriteriaProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.CriteriaProperty) | Struct | The filtering type and configuration of the automation rule. |
| [`CfnAutomationRuleV2.DateFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.DateFilterProperty) | Struct | A date filter for querying findings. |
| [`CfnAutomationRuleV2.DateRangeProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.DateRangeProperty) | Struct | A date range for the date filter. |
| [`CfnAutomationRuleV2.ExternalIntegrationConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.ExternalIntegrationConfigurationProperty) | Struct | The settings for integrating automation rule actions with external systems or service. |
| [`CfnAutomationRuleV2.MapFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.MapFilterProperty) | Struct | A map filter for filtering AWS Security Hub CSPM findings. |
| [`CfnAutomationRuleV2.NumberFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.NumberFilterProperty) | Struct | A number filter for querying findings. |
| [`CfnAutomationRuleV2.OcsfBooleanFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfBooleanFilterProperty) | Struct | Enables filtering of security findings based on boolean field values in OCSF. |
| [`CfnAutomationRuleV2.OcsfDateFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfDateFilterProperty) | Struct | Enables filtering of security findings based on date and timestamp fields in OCSF. |
| [`CfnAutomationRuleV2.OcsfFindingFiltersProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfFindingFiltersProperty) | Struct | Specifies the filtering criteria for security findings using OCSF. |
| [`CfnAutomationRuleV2.OcsfMapFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfMapFilterProperty) | Struct | Enables filtering of security findings based on map field values in OCSF. |
| [`CfnAutomationRuleV2.OcsfNumberFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfNumberFilterProperty) | Struct | Enables filtering of security findings based on numerical field values in OCSF. |
| [`CfnAutomationRuleV2.OcsfStringFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.OcsfStringFilterProperty) | Struct | Enables filtering of security findings based on string field values in OCSF. |
| [`CfnAutomationRuleV2.StringFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2.StringFilterProperty) | Struct | A string filter for filtering AWS Security Hub CSPM findings. |
| [`CfnAutomationRuleV2Props`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnAutomationRuleV2Props) | Struct | Properties for defining a `CfnAutomationRuleV2`. |
| [`CfnConfigurationPolicy.ParameterConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.ParameterConfigurationProperty) | Struct | An object that provides the current value of a security control parameter and identifies whether it has been customized. |
| [`CfnConfigurationPolicy.ParameterValueProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.ParameterValueProperty) | Struct | An object that includes the data type of a security control parameter and its current value. |
| [`CfnConfigurationPolicy.PolicyProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.PolicyProperty) | Struct | An object that defines how AWS Security Hub CSPM is configured. |
| [`CfnConfigurationPolicy.SecurityControlCustomParameterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.SecurityControlCustomParameterProperty) | Struct | A list of security controls and control parameter values that are included in a configuration policy. |
| [`CfnConfigurationPolicy.SecurityControlsConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.SecurityControlsConfigurationProperty) | Struct | An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy. |
| [`CfnConfigurationPolicy.SecurityHubPolicyProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicy.SecurityHubPolicyProperty) | Struct | An object that defines how AWS Security Hub CSPM is configured. |
| [`CfnConfigurationPolicyProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConfigurationPolicyProps) | Struct | Properties for defining a `CfnConfigurationPolicy`. |
| [`CfnConnector.AzureProviderConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnector.AzureProviderConfigurationProperty) | Struct | The configuration for connecting to an Azure environment. |
| [`CfnConnector.AzureScopeConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnector.AzureScopeConfigurationProperty) | Struct | The scope configuration for an Azure connector, defining the tenant or subscription scope. |
| [`CfnConnector.HealthIssueProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnector.HealthIssueProperty) | Struct | Represents a specific health issue detected for a connector. |
| [`CfnConnector.ProviderProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnector.ProviderProperty) | Struct |  |
| [`CfnConnectorProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorProps) | Struct | Properties for defining a `CfnConnector`. |
| [`CfnConnectorV2.AzureProviderConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.AzureProviderConfigurationProperty) | Struct | The configuration settings required to establish an integration between AWS Security Hub and Azure. |
| [`CfnConnectorV2.AzureScopeConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.AzureScopeConfigurationProperty) | Struct | The scope configuration for an Azure connector. |
| [`CfnConnectorV2.HealthIssueProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.HealthIssueProperty) | Struct | A health issue associated with the connector. |
| [`CfnConnectorV2.JiraCloudProviderConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.JiraCloudProviderConfigurationProperty) | Struct | The initial configuration settings required to establish an integration between Security Hub CSPM and Jira Cloud. |
| [`CfnConnectorV2.ProviderProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.ProviderProperty) | Struct | The third-party provider detail for a service configuration. |
| [`CfnConnectorV2.ServiceNowProviderConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2.ServiceNowProviderConfigurationProperty) | Struct | The initial configuration settings required to establish an integration between Security Hub CSPM and ServiceNow ITSM. |
| [`CfnConnectorV2Props`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnConnectorV2Props) | Struct | Properties for defining a `CfnConnectorV2`. |
| [`CfnDelegatedAdminProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnDelegatedAdminProps) | Struct | Properties for defining a `CfnDelegatedAdmin`. |
| [`CfnFindingAggregatorProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnFindingAggregatorProps) | Struct | Properties for defining a `CfnFindingAggregator`. |
| [`CfnHubProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnHubProps) | Struct | Properties for defining a `CfnHub`. |
| [`CfnHubV2.NetworkScanningProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnHubV2.NetworkScanningProperty) | Struct | Configuration for the Network Scanning opt-in feature of Security Hub V2. |
| [`CfnHubV2Props`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnHubV2Props) | Struct | Properties for defining a `CfnHubV2`. |
| [`CfnInsight.AwsSecurityFindingFiltersProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.AwsSecurityFindingFiltersProperty) | Struct | A collection of filters that are applied to all active findings aggregated by AWS Security Hub CSPM . |
| [`CfnInsight.BooleanFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.BooleanFilterProperty) | Struct | Boolean filter for querying findings. |
| [`CfnInsight.DateFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.DateFilterProperty) | Struct | A date filter for querying findings. |
| [`CfnInsight.DateRangeProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.DateRangeProperty) | Struct | A date range for the date filter. |
| [`CfnInsight.IpFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.IpFilterProperty) | Struct | The IP filter for querying findings. |
| [`CfnInsight.KeywordFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.KeywordFilterProperty) | Struct | A keyword filter for querying findings. |
| [`CfnInsight.MapFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.MapFilterProperty) | Struct | A map filter for filtering AWS Security Hub CSPM findings. |
| [`CfnInsight.NumberFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.NumberFilterProperty) | Struct | A number filter for querying findings. |
| [`CfnInsight.StringFilterProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsight.StringFilterProperty) | Struct | A string filter for filtering AWS Security Hub CSPM findings. |
| [`CfnInsightProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnInsightProps) | Struct | Properties for defining a `CfnInsight`. |
| [`CfnOrganizationConfigurationProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnOrganizationConfigurationProps) | Struct | Properties for defining a `CfnOrganizationConfiguration`. |
| [`CfnPolicyAssociationProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnPolicyAssociationProps) | Struct | Properties for defining a `CfnPolicyAssociation`. |
| [`CfnProductSubscriptionProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnProductSubscriptionProps) | Struct | Properties for defining a `CfnProductSubscription`. |
| [`CfnSecurityControl.ParameterConfigurationProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnSecurityControl.ParameterConfigurationProperty) | Struct | An object that provides the current value of a security control parameter and identifies whether it has been customized. |
| [`CfnSecurityControl.ParameterValueProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnSecurityControl.ParameterValueProperty) | Struct | An object that includes the data type of a security control parameter and its current value. |
| [`CfnSecurityControlProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnSecurityControlProps) | Struct | Properties for defining a `CfnSecurityControl`. |
| [`CfnStandard.StandardsControlProperty`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnStandard.StandardsControlProperty) | Struct | Provides details about an individual security control. |
| [`CfnStandardProps`](/v2/docs/aws-cdk-lib.aws_securityhub.CfnStandardProps) | Struct | Properties for defining a `CfnStandard`. |